[xdude]

I don't think it has nothing to do with a software been open source. When it's an open source software it's easier to find this sort of problems and also get patched faster. In most cases commercial software providers wouldn't say anything about loop holes even when the find one unless it's a really big security threat. Even then they tell their clients only when they find a solution for. We just have to stay upto date about these things and make sure to take all security measures.