Open source software slows down patches

According to Australian IT, the gap between a vulnerability and the patch to fix it is larger, due to open source software (OSS), Mozilla Firefox was mentioned.

THE growing popularity of open-source browsers and software may be responsible for the increasing gap between the exposure of a vulnerability and the provision of patch to fix it, security software vendor Symantec has said.

...

Mr Sykes said the increasing popularity of open source software, such as the Mozilla Foundation's Firefox browser, could be part of the reason for the increase in the gap between vulnerability and patch, with the open source development model itself part of the problem. "It is relying on the goodwill and best efforts of many people, and that doesn't have the same commercial imperative," he said. "I'm sure that is part of what is causing the blow-out in the patch window."

> For full story, please read OSS means slower patches (Australian IT, 19 Sept 2005)
> Join our discussion - “” at our Message Centre.