help / color / mirror / code / Atom feed
From: "Daniel Shahaf" <d.s@daniel.shahaf.name>
To: zsh-users@zsh.org
Subject: Re: zsh 5.8.1 released (CVE-2021-45444)
Date: Sun, 13 Feb 2022 18:33:14 +0000	[thread overview]
Message-ID: <8c1f46ab-8af7-450b-b6ff-7c17ca21847d@www.fastmail.com> (raw)
In-Reply-To: <2864ED24-62C9-4B2B-AA73-6D667C912DF8@dana.is>

dana wrote on Sun, 13 Feb 2022 10:10 +00:00:
> On 13 Feb 2022, at 02:58, david rayner <david@rayninfo.co.uk> wrote:
>> Out of curiosity what is the process by which this will filter out to the
>> various Linux & other distributions. Is it ad-hoc (I see you mention a
>> security mailing list) ?
> The people who maintain those distributions' zsh packages are generally
> subscribed to the mailing list, and they pull down the update when they see
> the announcement.

Note that by "the mailing list" dana meant zsh-announce@, not
zsh-security@.  The latter is used exclusively for discussing
vulnerabilities that have not yet been made public.



      reply	other threads:[~2022-02-13 18:34 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <3C1F736D-13E7-48FC-A708-EEE0F6E7253C@dana.is>
2022-02-13  8:58 ` david rayner
2022-02-13 10:10   ` dana
2022-02-13 18:33     ` Daniel Shahaf [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=8c1f46ab-8af7-450b-b6ff-7c17ca21847d@www.fastmail.com \
    --to=d.s@daniel.shahaf.name \
    --cc=zsh-users@zsh.org \


* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this public inbox


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).