Before you make such an ignorant comment again, why don't you go look at the package lists for the mainstream distros. I can guarantee you that they aren't identical. Each distributor chooses which versions of which programs and libraries to include. If glibc 2.2.x has a security hole but 2.2.y doesn't, only distros including 2.2.x will have that hole to deal with. Have you ever used linux before? I doubt it since you didn't know that every linux distributor chooses which versions of software to package per release.
You cannot take every security hole from every distro and add them together and call that a big list of holes for linux. As I said before, if it isn't a kernel-level hole it's not a linux security hole. It is a hole in that particular program or library which is maintained by an entirely different group of people.
But the Linux kernel is.