Debian did a good job, indeed, more over as the back-ported to older versions.
Incorrect. Debian still has not released a patch to Stable (4.1.2 based release, such as RHL73 is using). There are patches for other distros out there for 4.2.x based releases (e.g., RHL9, RHEL3).
Of course, creating updated PHP packages for FC2 or FC3 is pretty trivial, but it's very low on the priorities of php maintainer, I'd suspect.
-- Pekka Savola "You each name yourselves king, yet the Netcore Oy kingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings