The Linux Kernel Had Many Vulnerabilities Last Year

[phoronix]

Phoronix: The Linux Kernel Had Many Vulnerabilities Last Year

While today's 0-day local privilege escalation bug is making the news rounds on the Internet, there were many other security vulnerabilities discovered within the Linux kernel last year -- many of which didn't receive as much attention and some of them are even yet to be resolved...

http://www.phoronix.com/scan.php?page=news_item&px=2015-Linux-Kernel-CVEs

[bcdonadio]

there were many other security vulnerabilities discovered within the Linux kernel last year -- many of which didn't receive as much attention and some of them are even yet to be resolved...

Michael, maybe could you do a post with an analysis on how many CVEs were filled against the kernel along the years, how many were reported to be fixed, and how much time they took to do it?

Also, would be great if you could share your personal opinion on how well the distros seems to treat security issues. As an example, I really miss on Fedora an announce mailing list with the security notices like Ubuntu and Debian have, but on the other hand the Fedora SELinux policies seems to be exceptionally well done.