From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-3.3 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, MAILING_LIST_MULTI,RCVD_IN_DNSWL_MED,T_SCC_BODY_TEXT_LINE, UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 22425 invoked from network); 13 Mar 2022 00:03:29 -0000 Received: from zero.zsh.org (2a02:898:31:0:48:4558:7a:7368) by inbox.vuxu.org with ESMTPUTF8; 13 Mar 2022 00:03:29 -0000 ARC-Seal: i=1; cv=none; a=rsa-sha256; d=zsh.org; s=rsa-20210803; t=1647129809; b=AMhmoRgd7WiVSY2z0RfKyxFMF+/hccYBwtbmb0/XY7rINj+3Jeg9l/P0hLG28J/rceRo7zmSy7 bMlqqAyKyV8J1rjUfwQKg/Odb3L4SNRkg2Mv/UvVEEPyC3HqZ6ys3INvIHiW1vd/FEy9iS8q0a tkvnrGXmtVCgivtHf3mYnooVKP53WO7N9MD8H1QkBHCJDNBNEnp2m1YPsfcwscxCCclCitw5T4 k/NNWP8wns1HKDkW+/EoEcDze9mDdfeejR6WE5hPW2NuZqdOZDlvjM7c8l/IZOfv9g9P3jWFRT X0k9xZtk0GQcDvCRkdYLGOIE5fumTDst2URN2F0SDtCctQ==; ARC-Authentication-Results: i=1; zsh.org; iprev=pass (wnew1-smtp.messagingengine.com) smtp.remote-ip=64.147.123.26; dkim=pass header.d=dana.is header.s=fm1 header.a=rsa-sha256; dkim=pass header.d=messagingengine.com header.s=fm2 header.a=rsa-sha256; dmarc=none header.from=dana.is; arc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed; d=zsh.org; s=rsa-20210803; t=1647129809; bh=jos6k3AankjGFt/EKziT4wLzu544IM+caqlDGBjPgiA=; h=List-Archive:List-Owner:List-Post:List-Unsubscribe:List-Subscribe:List-Help: List-Id:Sender:Content-Type:Subject:Cc:To:From:Date:References:In-Reply-To: Message-ID:MIME-Version:DKIM-Signature:DKIM-Signature:DKIM-Signature; b=YCFaZpTpCxK86Pq94J61rz4UYwsmxerU/+rSmm/ZO7U69bemMXPGBpSqDXB97mLCmYoiIot8Ke 8ksQcPnXgpAW3vnnYlNBgxFsPdw5ZnLk9v0AJJOJIIB/5AWUXPpYt8V/YiV63u/DN7IHqO/xxO KT9rioEjagbpFmmWkb8JRVR07tBBijjxBzlDUpDooxwlHob4zxzvoUnK+WLWPLusOex42cZrk8 KDdgW55APgPBLutQXvvBb8rb1fq4Xt1Y7Z5tgBYuEzn9o76ATV7wNq8mEyFDm8+pDc56C/FBoK fhNLTwgC9X9ZSBF+8waC1qtI1UEllTQ3pvX2zhahb1ugrw==; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=zsh.org; s=rsa-20210803; h=List-Archive:List-Owner:List-Post:List-Unsubscribe: List-Subscribe:List-Help:List-Id:Sender:Content-Type:Subject:Cc:To:From:Date: References:In-Reply-To:Message-Id:Mime-Version:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID; bh=jos6k3AankjGFt/EKziT4wLzu544IM+caqlDGBjPgiA=; b=fVi3cQDVpTcxL4+KbzdETFQqNo 4vtfXuTfga3d/z1qf5MDzTpasbvXSWR0ZFDpSEy7H/jvhtMMeu6MOf7FXUbABzYTblJyz74znYKZp p+aK8Cq3y5XDiKUZ3z3MNZ2zPKXtIDlmKkNCQ9wOSVdi0nXD973TKxBAEEcrO5VCDqSr2OWurNyBk NQVUckqA+PPrXJoLUkvWye5hjo1KoO/WIda7T/TpACH2yAMyENTrcDuykfjdaPJGQ4nvgbb85h4Fs ozDs1tJrBr0LdZ+KLJi8HVdszt9G40JiaEni/HlFQLolLAkP/+0HeNzirVYXDIz1EsE97qwOlXTpc M6qXACyQ==; Received: from authenticated user by zero.zsh.org with local id 1nTBho-00054n-EU; Sun, 13 Mar 2022 00:03:28 +0000 Authentication-Results: zsh.org; iprev=pass (wnew1-smtp.messagingengine.com) smtp.remote-ip=64.147.123.26; dkim=pass header.d=dana.is header.s=fm1 header.a=rsa-sha256; dkim=pass header.d=messagingengine.com header.s=fm2 header.a=rsa-sha256; dmarc=none header.from=dana.is; arc=none Received: from wnew1-smtp.messagingengine.com ([64.147.123.26]:50233) by zero.zsh.org with esmtps (TLS1.3:TLS_AES_256_GCM_SHA384:256) id 1nTBh5-0004OO-K9; Sun, 13 Mar 2022 00:02:44 +0000 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailnew.west.internal (Postfix) with ESMTP id 4BE332B00098; Sat, 12 Mar 2022 19:02:41 -0500 (EST) Received: from imap50 ([10.202.2.100]) by compute4.internal (MEProxy); Sat, 12 Mar 2022 19:02:41 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dana.is; h=cc:cc :content-type:date:date:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:sender:subject :subject:to:to; s=fm1; bh=jos6k3AankjGFt/EKziT4wLzu544IM+caqlDGB jPgiA=; b=KPvMIqFpvHN5u5wBVAoI11OXXUDMIYltJKov4ZM2hyGj4L5vXvof4S AACiz6WV76d1R0P8Azsy7zRsUrjzxzs3jVU7wMGtTrRhYYJf5qKkEaiA4nVQuOAb IxywfgjlGSUeSI5xD7g6wbVCIN9oKMMBZ+OgqCRePNvpfXr+0/RHTaLDx5hXCLMS N+hvcKvx0RuOSpG+FGKb20Xnl9IFQz+zxnfgiMoQhRGyqosEGc6NnBbQfCDIFSoU 4MyAY/qlMNv0AaYRlwE+KuNeaNEkwQUiVyGGy13pXP7GqG74eVqbja00PCdcjLRi Yy/0f5YZpu6zCySY3WydsWELa3D36qCA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:sender:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=jos6k3AankjGFt/EK ziT4wLzu544IM+caqlDGBjPgiA=; b=GvbVPQyCdzF4TXSgi0ApNJzaPUZ5V5n6W gUWyAMNVuO+b/5VanNMVkBs53/oe2imqQgnjCtP2qN8Uvl0cD1nWXnu5uqpELBFt wK6kjo00orFcSC38cD9Rxt8xjg98o6dxkXy3MT0PuBlI/6Br/vd1mIbo4MCwS0iZ xZyqr+yaBpz2sP8CzWiwO9X2kweDOoHWtdxfHEvqRlQSWSBSmeNTuRcOvh+Ex5bm stFKTuuLiOLUrtzgxoKADWTz+xrpLGz+IhWsUI4UmhGzO9SLVX+kIjLaLzn6eKRF SVb3bCpWgIkqsShLGG27vOE4a5l1mqTW0uqwm1f1hW0FnSedDJKXg== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvvddruddvhedgudehucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepofgfggfkjghffffhvffutgesthdtredtreertdenucfhrhhomhepuggrnhgr uceouggrnhgrsegurghnrgdrihhsqeenucggtffrrghtthgvrhhnpeeiueehtdeftdelhe dtgeelgfdvfeduleegueduleejfeeijeeuteekheevuefgteenucevlhhushhtvghrufhi iigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpegurghnrgesuggrnhgrrdhish X-ME-Proxy: Received: by mailuser.nyi.internal (Postfix, from userid 501) id 64C011924D36; Sat, 12 Mar 2022 19:02:40 -0500 (EST) X-Mailer: MessagingEngine.com Webmail Interface User-Agent: Cyrus-JMAP/3.5.0-alpha0-4778-g14fba9972e-fm-20220217.001-g14fba997 Mime-Version: 1.0 Message-Id: In-Reply-To: References: <8e5ef93a-85b0-4a04-9b3a-01452f29e68f@www.fastmail.com> Date: Sat, 12 Mar 2022 18:01:55 -0600 From: dana To: "Vincent Bernat" Cc: zsh-users@zsh.org Subject: Re: CVE-2021-45444 really fixed in 5.8.1? Content-Type: text/plain X-Seq: 27551 Archived-At: X-Loop: zsh-users@zsh.org Errors-To: zsh-users-owner@zsh.org Precedence: list Precedence: bulk Sender: zsh-users-request@zsh.org X-no-archive: yes List-Id: List-Help: List-Subscribe: List-Unsubscribe: List-Post: List-Owner: List-Archive: On Sat 12 Mar 2022, at 16:58, Vincent Bernat wrote: > You mean, it was possible to do "%F{$(echo hello)}"? Yes, that kind of thing. dana