[rlpb]

It isn't clear to me whether "which OpenSSL forwarded to Red Hat and others" includes Canonical or not. It is clear that Red Hat was included by that statement, but what makes you think that this is a bias in who received a direct notification, as opposed to a bias of the author of this particular article?

[Daviey]

Mark J. Cox (RH) emailed the distro's mailing list inviting anyone on this very closed list to contact Red Hat SRT asking for details.

(http://www.openwall.com/lists/oss-security/2014/04/08/10)