On Friday, September 9, 2022 Vít Ondruch wrote:
However, I think that the idea is that whatever should be said about the CVE should be said in the main tracer. The fedora tracker should be used just to not forget to fix this in Fedora.
Why not both? We shouldn't have to reference two different bugs to figure out what's going on.