From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org
X-Spam-Level: 
X-Spam-Status: No, score=-3.4 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	DKIM_VALID_AU,MAILING_LIST_MULTI,RCVD_IN_DNSWL_MED,RCVD_IN_MSPIKE_H3,
	RCVD_IN_MSPIKE_WL autolearn=ham autolearn_force=no version=3.4.4
Received: (qmail 12068 invoked from network); 29 Apr 2021 12:29:09 -0000
Received: from mother.openwall.net (195.42.179.200)
  by inbox.vuxu.org with ESMTPUTF8; 29 Apr 2021 12:29:09 -0000
Received: (qmail 17885 invoked by uid 550); 29 Apr 2021 12:29:07 -0000
Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm
Precedence: bulk
List-Post: <mailto:musl@lists.openwall.com>
List-Help: <mailto:musl-help@lists.openwall.com>
List-Unsubscribe: <mailto:musl-unsubscribe@lists.openwall.com>
List-Subscribe: <mailto:musl-subscribe@lists.openwall.com>
List-ID: <musl.lists.openwall.com>
Reply-To: musl@lists.openwall.com
Received: (qmail 17865 invoked from network); 29 Apr 2021 12:29:06 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=dereferenced.org;
	s=mailbun; t=1619699333;
	bh=NgnGwxBmc3kkFWhkHzvewI5IvMcjcG90klgqKK0u4c4=;
	h=Date:From:To:Subject:In-Reply-To:References;
	b=b56Ri8BrFTXiEFGHLN7kiQ3kFJeln0VFonAAYQXwWbq51UHs3+ItolpwcAyI6ikNH
	 dce9btfBn75HocX+iMLganK7gDg+5DE2hMoDKAoTMUxW1c8uIbuElUwl0d4P/+ad+v
	 EdKpLu51fds0r2pwz5BBuGzWJmRHynJHbq5/peDtNx25wlhpPlNcmvslER8v+TI6C0
	 8y5ViFWtnF9HY1Nh6CEOlBz0C/D5cEUDhY8z1Jpq9X4DPzC2GoqOqcTUVzcOwZhqYQ
	 0dXCjWvsiuDjF52xPG0txyiQ+X1hoURgD+YL2Yrqa+NQNmFeJh9PpZtkj15hpSKXdr
	 vsqtEDeKZNfZg==
Date: Thu, 29 Apr 2021 06:28:52 -0600 (MDT)
From: Ariadne Conill <ariadne@dereferenced.org>
To: musl@lists.openwall.com
In-Reply-To: <9344409e-d213-9089-fbd9-b50d8d4fc6ed@sit.fraunhofer.de>
Message-ID: <2c3494ce-965a-cc9d-8a66-c3eb58c635ef@dereferenced.org>
References: <9344409e-d213-9089-fbd9-b50d8d4fc6ed@sit.fraunhofer.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII; format=flowed
Subject: Re: [musl] Security issue in musl

Hello,

On Thu, 29 Apr 2021, Philipp Jeitner (SIT) wrote:

> Hi,
>
> i would like to report a security issue in musl and would like to ask if this 
> is the correct address to send the details to.

It depends on the severity of the issue.  If it is not a big deal, go 
ahead and report it here.  Otherwise, it is probably best to report it to 
Rich privately and let him decide how to proceed.

Ariadne