"I think that the major change in 2002 over 2001 in Linux security was that major heavily-deployed subsystems continued to get more hardened. The recent versions of Sendmail, LPD (Line Printer Daemon), and the commercial (ssh.com) version of SSH suffered no vulnerabilities. This may be a record for these subsystems.
"Non-Windows Apache did suffer the first discovered vulnerabilities in five years with Chunk and SSL. DNS suffered one that would be hard to use if one's firewall is properly configured. While OpenSSH suffered a number of problems, I do not yet consider it secure enough to deploy in 'Production' environments. The ssh.com version is free for Linux, more secure, and easier to use--so use it..."
