From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-3.3 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, MAILING_LIST_MULTI,RCVD_IN_DNSWL_MED,T_SCC_BODY_TEXT_LINE, UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 14590 invoked from network); 13 Feb 2022 18:34:38 -0000 Received: from zero.zsh.org (2a02:898:31:0:48:4558:7a:7368) by inbox.vuxu.org with ESMTPUTF8; 13 Feb 2022 18:34:38 -0000 ARC-Seal: i=1; cv=none; a=rsa-sha256; d=zsh.org; s=rsa-20210803; t=1644777278; b=Jk68sKo1FitIrZOsbgxR+PMSzEnSDR0M8nSsYIQPYglzg+i4ALg0m3i8ZGK2K0ui297WQwOaZZ 9fCWTohdG10F8ugbpMtdOxQw3cISK0FxIXwoA/2Uio4y10pPEO88m61YwWHiNDfQECmSHGUJiZ JhJKHUcRAZyePC4GWSmKsi1oDFS8882Aui0fQxF/iJWk+q9XCOWwfeEUwg+Q5Wm3AFwKyvyGut imivp3OTWvm890tsQCJrp3i+j12A58is7gNGkSlLv5hYdeXHehT5D2B1BVzLV9kc/VTRUNLoVw IGOhd9VVPVuQ0AYwaImkczYvkxA5meSVFAb1eu0FYposDA==; ARC-Authentication-Results: i=1; zsh.org; iprev=pass (wout2-smtp.messagingengine.com) smtp.remote-ip=64.147.123.25; dkim=pass header.d=daniel.shahaf.name header.s=fm2 header.a=rsa-sha256; dkim=pass header.d=messagingengine.com header.s=fm2 header.a=rsa-sha256; dmarc=none header.from=daniel.shahaf.name; arc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed; d=zsh.org; s=rsa-20210803; t=1644777278; bh=cxSM7jm7vaO0YpETylZCktOLmZhxhivJ7X9dQT4LuGE=; h=List-Archive:List-Owner:List-Post:List-Unsubscribe:List-Subscribe:List-Help: List-Id:Sender:Content-Type:Subject:To:From:Date:References:In-Reply-To: Message-ID:MIME-Version:DKIM-Signature:DKIM-Signature:DKIM-Signature; b=VgZX4k56J8nZ73Ft2lxgi9SAg5NJLlPIyZ+WF7IlSzhURl1r1vDsBRg0htQn3GLFxl5z4Xlv1i hil1p3/8/Rq1E3yq8MMU01OLTo3P+Fnh2vuIQyHb1U/S2US3klm6vBo7CjnvfDl1J6kSjT+VC8 t5Pn8o/tynFdiuM9KFSQYL7Reuy9x+i9NJhv83UQpzu9vyVrpX0jT3qBCW3SFM02XIe7YBvbAI 8J5sdFYX8qA7+wYz8B22ayh9i9Cbl9RwyOqZ3JjED702oMlZNl4gMSJPb8ctTbBTlsaMhWDxf2 ua78FZB6zHs8UpJKfxBvQBt+NnMPHWwQ6dcV39gauoE2VQ==; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=zsh.org; s=rsa-20210803; h=List-Archive:List-Owner:List-Post:List-Unsubscribe: List-Subscribe:List-Help:List-Id:Sender:Content-Type:Subject:To:From:Date: References:In-Reply-To:Message-Id:Mime-Version:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID; bh=wc7c0/YoeDzR55R9WWk9c9h9lJ9f1hv169N0CTBh1Ss=; b=mcFGRCAx+96VBMJEnpmQ8VksJT 8msD8bkeCE9OPTSKT5MhZe0qoUP+mX5OMB+Hmpnj9k0PPiL00B7rI3SWhrHP+mFiYkJhR+aHN1gab xMxPa36NsHulOwaSZwi9m4CSmWSh6SnnuXumOmiB3IPWHX45fz8PXjTFmL/vBj1BxlWYR2EP4Fvms PDf+oT50T5AoH1xhvweNBFnbFI3YtXroYle7m655HZRkbJ0hDtqgKqGpjjh9ziRLla4JzDrLsSvng EGs6GZyYsMkkvKW+q00yJKHGL4fknYhvVrZAcnlKTVtpzq647d7pw2xaPIUxZzcVzUbcBSJHselCz hP5x+Hnw==; Received: from authenticated user by zero.zsh.org with local id 1nJJhl-000PTr-Hm; Sun, 13 Feb 2022 18:34:37 +0000 Authentication-Results: zsh.org; iprev=pass (wout2-smtp.messagingengine.com) smtp.remote-ip=64.147.123.25; dkim=pass header.d=daniel.shahaf.name header.s=fm2 header.a=rsa-sha256; dkim=pass header.d=messagingengine.com header.s=fm2 header.a=rsa-sha256; dmarc=none header.from=daniel.shahaf.name; arc=none Received: from wout2-smtp.messagingengine.com ([64.147.123.25]:52807) by zero.zsh.org with esmtps (TLS1.3:TLS_AES_256_GCM_SHA384:256) id 1nJJgp-000Okf-NW; Sun, 13 Feb 2022 18:33:41 +0000 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.west.internal (Postfix) with ESMTP id 027CF3200E60 for ; Sun, 13 Feb 2022 13:33:36 -0500 (EST) Received: from imap46 ([10.202.2.96]) by compute4.internal (MEProxy); Sun, 13 Feb 2022 13:33:37 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= daniel.shahaf.name; h=cc:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:sender:subject:subject:to:to; s=fm2; bh=wc7c0/YoeDzR55 R9WWk9c9h9lJ9f1hv169N0CTBh1Ss=; b=TiuuwHm8AbdXYsfpUkcQO5yHKnEDLl rQ3rtOx+ysfk45nba0AUFDi7UrNHPMBjyNY5q26m2hyZY7olvVuSR5iz9yeqax0P pza8Vv8Wmb+wZB3DzuOogLdasWN3PX8J/BAsm4AnToB4Ltcc7xn52s/R+5Sc7QfN k8sFzbIF8l3XjAeuQr18J2nWPrHGwLGjFkIZJcV+jUnE1IFvD1osslIKbuE8TswW wPFb7+c6vEajnwhsKMZYmjYUoYHkgOa2rRXorv1+H0oa02iiazHCZnHykgdqX9Hu 1WP5FxCErvZwbv0WhHJdTcdhspDt843oNnjAGmaYlCb6SyXoyNBRFZAQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:sender:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=wc7c0/YoeDzR55R9W Wk9c9h9lJ9f1hv169N0CTBh1Ss=; b=dIsX+HL9S8NPR+FGjcZTS0R+6FIG5/k8p kZGdNl79yc5KnZAlMrfiM04F9SVTVN6R1z6rADeYMln7fAlntXhjxnmp8T4ifIuw MYTBx9SaP087cW7HaWjCy/ZWAFrDFiGCX280yF/DIsWWpVrOYEZaTdVi2x/TgFn5 ZkvWF2gPS9VW7GHhPiJQf1rxE9E4J5ntZeReDlsU5f3UGu8hyNoNW9t2gqC3h64d 5G6SpBoyNqlE8UiVoZfJWPkVREzMZDCLJYqb/aZt0so6D+ET5cTLKhXEqTloAEQu lAZqsbkdH7yMaK5Scn1MPPRI+iE0rMtcL8nvCqvZVLJt7pcY78zdw== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvvddrjedtgddutdelucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefofgggkfgjfhffhffvufgtsehttd ertderredtnecuhfhrohhmpedfffgrnhhivghlucfuhhgrhhgrfhdfuceougdrshesuggr nhhivghlrdhshhgrhhgrfhdrnhgrmhgvqeenucggtffrrghtthgvrhhnpeejueevheeuke ejtdffgeevlefhteehhfelhfffgfduuefhtddvhefhjeekgeehtdenucevlhhushhtvghr ufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpegurdhssegurghnihgvlhdrsh hhrghhrghfrdhnrghmvg X-ME-Proxy: Received: by mailuser.nyi.internal (Postfix, from userid 501) id 46EF71EE007B; Sun, 13 Feb 2022 13:33:36 -0500 (EST) X-Mailer: MessagingEngine.com Webmail Interface User-Agent: Cyrus-JMAP/3.5.0-alpha0-4748-g31a5b5f50e-fm-cal2020-20220204.001-g31a5b5f5 Mime-Version: 1.0 Message-Id: <8c1f46ab-8af7-450b-b6ff-7c17ca21847d@www.fastmail.com> In-Reply-To: <2864ED24-62C9-4B2B-AA73-6D667C912DF8@dana.is> References: <3C1F736D-13E7-48FC-A708-EEE0F6E7253C@dana.is> <07a9d039-38c6-e98b-2af0-a0da44b7ad96@rayninfo.co.uk> <2864ED24-62C9-4B2B-AA73-6D667C912DF8@dana.is> Date: Sun, 13 Feb 2022 18:33:14 +0000 From: "Daniel Shahaf" To: zsh-users@zsh.org Subject: Re: zsh 5.8.1 released (CVE-2021-45444) Content-Type: text/plain X-Seq: 27522 Archived-At: X-Loop: zsh-users@zsh.org Errors-To: zsh-users-owner@zsh.org Precedence: list Precedence: bulk Sender: zsh-users-request@zsh.org X-no-archive: yes List-Id: List-Help: List-Subscribe: List-Unsubscribe: List-Post: List-Owner: List-Archive: dana wrote on Sun, 13 Feb 2022 10:10 +00:00: > On 13 Feb 2022, at 02:58, david rayner wrote: >> Out of curiosity what is the process by which this will filter out to the >> various Linux & other distributions. Is it ad-hoc (I see you mention a >> security mailing list) ? > > The people who maintain those distributions' zsh packages are generally > subscribed to the mailing list, and they pull down the update when they see > the announcement. Note that by "the mailing list" dana meant zsh-announce@, not zsh-security@. The latter is used exclusively for discussing vulnerabilities that have not yet been made public. Cheers, Daniel