
"The United States Computer Emergency Readiness Team
released its year-end summary of computer vulnerabilities. While Windows is regarded as the most insecure operating system, the US-CERT found four times as many vulnerabilities specifically related to Unix and Linux. Of 5198 reported flaws, 812 were for the Windows, 2328 for Unix and Linux, and 2058 more affected more than one operating system. Notably missing from the list of Windows vulnerabilities is the recently discovered Windows Metafile issue. No vulnerabilities were listed for Apple's Mac OS X, however several had been disclosed during the year. Also, since OS X is based on Unix, it is vulnerable to some of the flaws associated with its core operating system."
Note: The link is fixed. I have no idea what happened there, sorry guys!
Member since:
2005-07-08
If you work for any US Government agency, the quality of the security information is usually fair to poor, and in many cases gleaned from other web sites. When I get notification of vulnerabilities from the Government (DoD), I usually have them patched or have the downtime to patch scheduled before receiving the notice.
This is why I use SecurityFocus and SecurityTracker on a daily basis rather than wait for a Government agency to send an advisory. And on the rare occasion that I actually need it, go to CVE (cve.mitre.org) for information from them on specific vulnerabilities.