What’s that sound? Could it be laughter? Perhaps, as the title caught me by surprise as well. This report was compiled by a Microsoft employee, but all of the information is based off of publicly available information. If there is anything I garnered from the report, it’s that Red Hat has a -lot- of vulnerabilities, no doubt thanks to its wide server usage.
While it might be easy to dismiss a report from any OS company that puts its own product in the most favorable light as being biased, it is important to remember that the data source from which Jones has made his graphs is based on publicly-available information from the National Institute of Standards (NIST), which keeps track of software vulnerabilities in the National Vulnerability Database.
Source: Ars Technica