Gentoo Archives: gentoo-security

From: Wolfram Schlich <lists@×××××××××××××××.org>
To: gentoo-dev@l.g.o, gentoo-security@l.g.o
Subject: [gentoo-security] "Linux patch problems: Your distro may vary"
Date: Mon, 07 Aug 2006 16:05:45

I just stumbled over an article from which was linked to
in a heise newsticker posting that tries to analyze how fast distributions
react to security vulnerabilities:

Quick chart:

	Rank Distro                    Points/100
	---- ------------------------- ----------
	1.   Ubuntu                    76
	2.   Fedora Core               70
	3.   Red Hat Enterprise Linux  63
	4.   Debian GNU/Linux          61
	5.   Mandriva Linux            54
	6.   Gentoo Linux              39
	7.   Trustix Secure Linux      32
	8.   SUSE Linux Enterprise     32
	9.   Slackware Linux           30

Rank 6 out of 10 is not a great result -- at least we beat SUSE ;)

Any comments or thoughts about this?
Can we become better?
Are we maybe better than the author pretends?
Does the security team currently face serious problems that need to be
solved, be it inside or outside the security team?

I am just curious and would be glad to get some feedback :)
Wolfram Schlich <wschlich@g.o>
Gentoo Linux *
gentoo-security@g.o mailing list