Are You Using Insecure Open Source Components?
FOSSBazaar is no longer being updated. The information on this site is preserved for your convenience but may be out of date. Please visit Linux Foundation's Open Compliance Program for current information and activities.
InternetNews.com discusses the problem of out of date software with security vulnerabilities: "No question there are vulnerable open source components, but no question they get updated by their upstream projects as fast (if not faster) than any other form of software. The only question that need to be answered is – are you up to date?"