That something may be wrong with Launchpad or something around it.
>Just as an aside 3 of those Red Hat bug hits are essentially the same bug report,
Yes. If the number of bugs were greater, the statistical noise would be smaller. I chose to leave it as is. But, the "noise" hints to something different: that there never was a security-fix release in Ubuntu. Great, Scott.
>For that sort of subtle hard to confirm bug, at what point do you as an upstream want to be poked?
If they cannot figure it out on their own within like, 1 or 2 days, going upstream is essential. Otherwise, they risk not getting any answer *at all*, because bugs just rot in Launchpd and upstream is then already months away from the conversion, uninterested in old bugs as they have been ironed out by the other distros.