Differences

This shows you the differences between two versions of the page.

--- mailing-lists:distros:stats:2026 [2026/09/03 22:11]
solar wiki formatting fix in one of the new entries
+++ mailing-lists:distros:stats:2026 [2026/10/05 02:28] (current)
solar add 2026-09
@@ Line 14: / Line 14: @@
 | 2026-07 | 22 | 22 | 11.24 | 7.47 | 1.16 | 43.40 |
 | 2026-08 | 17 | 17 | 7.19 | 5.99 | 1.03 | 14.79 |
-| Total | 108 | 108 | 9.49 | 6.90 | 0.07 | 57.65 |
+| 2026-09 | 9 | 9 | 4.39 | 2.14 | 1.31 | 14.22 |
+| Total | 117 | 117 | 9.10 | 6.81 | 0.07 | 57.65 |
 Non-embargoed reports (issue already posted to oss-security before being brought to (linux-)distros, which in 2026 didn't occur yet) are (would be) excluded from the calculation of average, median, and minimum embargo duration above.
@@ Line 133: / Line 134: @@
 | OpenStack Glance | [vs] ... \\ [[https://www.openwall.com/lists/oss-security/2026/09/03/2|[oss-security] [OSSA-2026-038] OpenStack Glance: Multiple SSRF vulnerabilities in web-download and HTTP image APIs (CVE-2026-71196, CVE-2026-71197, CVE-2026-71198)]] | Thu Aug 27 04:20:06 2026 \\ Thu Sep 03 16:11:49 2026 | 7.49 | 2026-09-03 15:00 UTC | CVE-2026-71196 \\ CVE-2026-71197 \\ CVE-2026-71198 \\ LP#2160020 |
 | curl | [vs-plain] : curl pre-notification of 8 security advisories \\ [[https://www.openwall.com/lists/oss-security/2026/09/02/2|[oss-security] [SECURITY ADVISORIES] curl 8.22.0]] | Fri Aug 28 14:29:47 2026 \\ Wed Sep 02 10:55:07 2026 | 4.85 | Wednesday September 2 | CVE-2026-13608 \\ CVE-2026-18924 \\ CVE-2026-19931 \\ CVE-2026-80229 \\ CVE-2026-80230 \\ CVE-2026-80231 \\ CVE-2026-80255 \\ CVE-2026-82208 |
+| Linux | [vs-plain] Guest-to-Host Escape in KVM/arm64 \\ [[https://www.openwall.com/lists/oss-security/2026/09/16/14|[oss-security] CVE-2026-89775: Guest-to-Host Escape in KVM/arm64]] | Fri Sep 11 15:46:07 2026 \\ Wed Sep 16 16:02:51 2026 | 5.01 | 2026-09-16 16:00 UTC | CVE-2026-89775 |
+| Unbound | [vs] ... \\ [[https://www.openwall.com/lists/oss-security/2026/09/16/3|[oss-security] Unbound: 1.26.1 addresses multiple CVE items]] | Mon Sep 14 13:04:53 2026 \\ Wed Sep 16 15:03:02 2026 | 2.08 | 16 September 2026 \\ September 16 when the the accompanying email to oss-security@ arrives | CVE-2026-81642 \\ CVE-2026-81634 \\ CVE-2026-82717 \\ CVE-2026-77955 \\ CVE-2026-78227 \\ CVE-2026-80225 \\ CVE-2026-82720 \\ CVE-2026-85501 \\ CVE-2026-77860 |
+| BIND 9 | [vs] ... \\ [[https://www.openwall.com/lists/oss-security/2026/09/16/4|[oss-security] ISC has disclosed fourteen vulnerabilities in BIND 9 (CVE-2026-19033, CVE-2026-19662, CVE-2026-19666, CVE-2026-19667, CVE-2026-19668, CVE-2026-19941, CVE-2026-75029, CVE-2026-76163, CVE-2026-77119, CVE-2026-77692, CVE-2026-78301, CVE-2026-80274, CVE-2026-81563, CVE-2026-81736)]] | Tue Sep 15 07:36:10 2026 \\ Wed Sep 16 15:03:21 2026 | 1.31 | 16 September 2026 \\ 16th September 12:00 UTC | CVE-2026-19033 \\ CVE-2026-19662 \\ CVE-2026-19666 \\ CVE-2026-19667 \\ CVE-2026-19668 \\ CVE-2026-19941 \\ CVE-2026-75029 \\ CVE-2026-76163 \\ CVE-2026-77119 \\ CVE-2026-77692 \\ CVE-2026-78301 \\ CVE-2026-80274 \\ CVE-2026-81563 \\ CVE-2026-81736 |
+| OpenSSL | [vs-plain] Embargoed OpenSSL security issue \\ [[https://www.openwall.com/lists/oss-security/2026/09/29/28|[oss-security] OpenSSL Security Advisory [29th September 2026] ]] | Tue Sep 15 10:51:52 2026 \\ Tue Sep 29 16:10:09 2026 | 14.22 | 29th September 2026 | CVE-2026-84782 \\ CVE-2026-84783 \\ CVE-2026-35189 \\ CVE-2026-35191 \\ CVE-2026-42772 \\ CVE-2026-54872 \\ CVE-2026-54873 \\ CVE-2026-54875 \\ CVE-2026-72897 \\ CVE-2026-75804 \\ CVE-2026-75805 \\ CVE-2026-75806 \\ CVE-2026-77696 \\ CVE-2026-84784 |
+| Exim | [vs] Advance notice of Exim Security Release 4.100.1 \\ [[https://www.openwall.com/lists/oss-security/2026/09/19/2|[oss-security] Exim Security Release 4.100.1]] | Tue Sep 15 15:31:11 2026 \\ Sat Sep 19 03:51:39 2026 | 3.51 | 2026-09-18T12:00:00+0000 | GCVE-25-2026-09-50-1 \\ GCVE-25-2026-09-51-1 \\ GCVE-25-2026-09-55-1 \\ GCVE-25-2026-09-56-1 |
+| Linux | [vs-plain] A quartet of Linux kernel LPE affecting a number of distros \\ [[https://www.openwall.com/lists/oss-security/2026/09/18/3|[oss-security] A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill]] | Wed Sep 16 04:28:37 2026 \\ Fri Sep 18 06:15:23 2026 | 2.07 | Friday, September 18, 6am UTC (Thursday, September 17, 2026, 11pm PT) | DirtyAH6 (CVE-2026-80844) \\ TUNderflow (CVE-2026-81000) \\ PPPoEject (CVE-2026-68121) \\ DiagSpill (CVE-2026-74469) |
+| GNU Inetutils | [vs-plain] GNU Inetutils uninitialized struct sigaction usage \\ [[https://www.openwall.com/lists/oss-security/2026/09/26/1|[oss-security] CVE-2026-95510: GNU Inetutils: use of uninitialized struct sigaction]] | Sat Sep 19 03:14:18 2026 \\ Sat Sep 26 06:15:52 2026 | 7.13 | 2026-09-25 | CVE-2026-95510 |
+| rsyslog | [vs-plain] [vs] rsyslog imdtls permitted-peer authorization bypass — embargoed until 2026-09-22 16:00 UTC \\ [[https://www.openwall.com/lists/oss-security/2026/09/22/19|[oss-security] rsyslog imdtls permitted-peer authorization bypass]] | Sun Sep 20 14:49:35 2026 \\ Tue Sep 22 16:27:58 2026 | 2.07 | 2026-09-22 16:00 UTC |  |
+| ntfs-3g | [vs] ... \\ [[https://www.openwall.com/lists/oss-security/2026/09/23/4|[oss-security] Vulnerabilities in ntfs-3g]] | Mon Sep 21 11:41:42 2026 \\ Wed Sep 23 15:05:10 2026 | 2.14 | 2026-09-23 11:00 UTC | NTFS-3G-SA_2026-06-1_20 \\ NTFS-3G-SA_2026-06-1_19 \\ NTFS-3G-SA_2026-06-1_12 \\ NTFS-3G-SA_2026-06-1_11 \\ NTFS-3G-SA_2026-06-1_10 \\ NTFS-3G-SA_2026-06-1_08 \\ NTFS-3G-SA_2026-06-1_07 \\ NTFS-3G-SA_2026-06-1_05 |
 ===== Source input data =====
@@ Line 146: / Line 156: @@
   * {{stats-202607.txt}}
   * {{stats-202608.txt}}
+  * {{stats-202609.txt}}