Red hat does a good job with regards to security and only security, but the data is not available from most other distros and the format is not good for aggregation.
I think all commercial vendors should get together and publish metadata about the work they are doing as open data.
A distrowatch-like website that can answer questions like:
"Which distro updated the kernel and bind the most and fixed its security issues the fasted in the last three years."
Currently the data for that is too hard to get from most distros. I think this data would give SLES, RHEL, Ubuntu, Debian a clear advantage over these fire and forget distros that just make a release and never do any maintenance.
Posted Jul 31, 2009 12:37 UTC (Fri) by jond (subscriber, #37669)
[Link]
I wonder who would seriously make a decision based soley on that data, aggregated in one place. It would seem very daft to make a distro decision for any sized site based soley on criteria that can be aggregated (and presumably by unvetted, vendor-supplied data at that).
Open distro meta data
Posted Jul 31, 2009 22:28 UTC (Fri) by kragil (subscriber, #34373)
[Link]
I wouldn*t pick a distro _soley_ based on this data, but I would probably discard a lot of distros based on it. That can be very useful too.
And I don't see any problem that is data would be vendor supplied. Lying would't work in a FOSS ecosystem.
Open distro meta data
Posted Aug 8, 2009 21:15 UTC (Sat) by dsas (subscriber, #58356)
[Link]
The security release date can be checked by checking the date that the updated package was released.
Also I don't think anyone said anything about solely using that data to make a distro choice.