Language Selection

English French German Italian Portuguese Spanish

Red Hat and Firefox more buggy than Microsoft?

Filed under
Security

Secunia has found that the number of security bugs in the open source Red Hat Linux operating system and Firefox browsers far outstripped comparable products from Microsoft last year.

Out of the operating systems monitored by Secunia - Windows (98 and onwards), Mac OS X, HP-UX 10.x and 11.x, Solaris 8, 9, and 10 and Red Hat (excluding Fedora) - Red Hat was found to have by far the most vulnerabilities, at 633, with 99 percent found in third-party components. (Linux distributions are generally composed mostly of third-party software, which is integrated by the distributor.)

Red Hat has taken issue with the figures, claiming the accurate number should be 404 vulnerabilities for last year.

Windows had only 123 bugs reported, but 96 percent of those were found in the operating system itself.

More Here




Red Hat bugs - another open source PR hit?

Red Hat and Firefox are reported to have more bugs in them than their Microsoft equivalents. But the truth is, as always, more complex. And once again, security is shown as a key point where rival approaches are bidding to distinguish themselves.

Secunia reported the discrpancy, stating in its 2007 Report that Red Hat had 633 flaws, compared with Windows' 123. However, Red Hat's Mark Cox quickly pointed out in a blog that a) the number was wrong, Cool it counted flaws in all the third party products associated with Red Hat's OS, and worst of all c) it counted several bugs six times, since it added up fixes made for the same bug, on multiple Red Hat products.

The interesting thing is why Secunia would push this story at all.

More Here

Firefox is fixed faster

Counting security vulnerabilities to compare the security of different software projects is flawed. It is only a useful metric if you are comparing a project to itself over time. I’ve discussed this topic here and here. It’s even more ridiculous to try and compare an open source bug count to a closed source project because you can see all the bugs in an open source project. You can only see the publicly found security issues for a closed source product, like Internet Explorer.

So what is interesting in the Techworld article is the measures of real risk to users:

More Here

Good additions there

When I saw the headline I was going to post these rebuttal articles too, but you beat me to it. Nice review of MEPIS BTW...

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

More in Tux Machines

AMD Catalyst 14.9 Linux Driver Is Out, Release Disappoints, as Usual

The AMD developers have announced that a new Catalyst 14.9 Linux driver is now out and that it brings support for a couple of new operating systems and a few bug fixes. New AMD Linux drivers don't arrive as often as the community wants or needs them and the company doesn't have the best track record in the open source world. As it stands right now, there are two kinds of drivers available to Linux users, one that's open source and another one that's proprietary. Catalyst 14.9 is made by AMD and provides better functionality than the open source one, but it doesn't get updated too often. Read more

Calibre for Linux Review – The Best App for Anything Related to eBooks

Calibre is the premiere application on the Linux platform to convert, edit, view, and download eBooks. It has so many features it would be difficult just to count them all, but it's time to take a closer look at this app and see what changed in the years that passed since our last review. Read more

Operating System U Fails To Live Up To Its Goals

After launching last month on Kickstarter, the project has turned into a failure and all development has ceased. Operating System U by Andrew Bernstein only raised $1,948 of its $50,000 goal over the month-long period for the OS that claimed numerous advantages over Ubuntu and Windows 8. Andrew then posted, "Unfortunately OS U was unsuccessful. I truly, truly appreciate everyone who backed us, but unfortunately since we where unsuccessful, combined with other circumstances, OS U will not have any more continued development." Read more

Calculate Intro, OpenMandriva Review, and Mageia Delay

Today in Linux news Jessie Smith has a nice article on Gentoo-derivative Calculate Linux 14 in this week's Distrowatch Weekly. Linuxbsdos.com has a review of OpenMandriva Lx 2014.1, released last week. Mageia 5 Beta 1 is delayed and openSUSE 11.4 is "truly, finally dead." We have all this and more in tonight's Linux news recap. Read more