Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 25 Jul 2019 23:01:08 +0200
From: Kristian Fiskerstrand <>
To:, Solar Designer <>
Subject: Re: Statistics for distros lists updated for 2019Q2

On 25.07.2019 21:23, Solar Designer wrote:
> Hi,
> On Thu, Jul 25, 2019 at 08:54:55PM +0200, Kristian Fiskerstrand wrote:
>> Apologies for the delay, and a short notice that the statistics for the
>> distros list have been updated for the 2nd quarter of 2019 at
> You have two entries for Exim CVE-2019-10149, which is wrong.  Also,
> some of the dates are wrong (e.g., the date of Exim's pre-announcement
> to oss-security is irrelevant).  Please combine this into one entry and
> update the dates.  I guess the range of dates should be from 2019-05-28
> (initial notification to distros) to 2019-06-05 (full publication).

Thanks for the feedback, I was a bit unsure how to handle this given two
different reporters.

> Correcting this will probably affect the averages.

Indeed, moving this one into one entry and including full disclosure as
end of timeline changes the avg from 6.31 to 6.69 for may

Stats updated.

Kristian Fiskerstrand
OpenPGP keyblock reachable at hkp://
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3

Download attachment "signature.asc" of type "application/pgp-signature" (489 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.