Unfortunately, there's always been an issue of poor communication of bugs between RHEL and Fedora. And it goes both ways: a while ago, there was a trivial local root exploit that was fixed in the RHEL version of perl-suidperl, but it took months to get the corresponding fix into Fedora.