On the bottom of page 39 they define the Red Hat operating systems as:
"Red Hat Linux (including enterprise versions and Red Hat Fedora)"
No wonder it came out with the most vulnerabilities. One vulnerability would be counted 7 times (RHEL 2.1, 3, 4 and Fedora 3, 4, 5, and 6) instead of the one instance it should have been counted as. I don't understand why Fedora would be lumped under the Red Hat flag either. Its obviously going to have more vulnerabilities simply because it has code that's closer to the cutting edge. Red Hat waits for Fedora to flush out many of these types of bugs so they can offer a secure OS to its customers. Secondly Red Hat doesn't offer support of Fedora and doesn't have an obligation to release patches for it. Counting those numbers in their totals really skews the counts.
Slashdot Mirror
On the bottom of page 39 they define the Red Hat operating systems as: "Red Hat Linux (including enterprise versions and Red Hat Fedora)" No wonder it came out with the most vulnerabilities. One vulnerability would be counted 7 times (RHEL 2.1, 3, 4 and Fedora 3, 4, 5, and 6) instead of the one instance it should have been counted as. I don't understand why Fedora would be lumped under the Red Hat flag either. Its obviously going to have more vulnerabilities simply because it has code that's closer to the cutting edge. Red Hat waits for Fedora to flush out many of these types of bugs so they can offer a secure OS to its customers. Secondly Red Hat doesn't offer support of Fedora and doesn't have an obligation to release patches for it. Counting those numbers in their totals really skews the counts.