Josh Bressers of Red Hat just informed CVE independently of the incorrect version. More information, including discussion of severity, is at https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=158688 - Steve