From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-3.4 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,MAILING_LIST_MULTI,RCVD_IN_DNSWL_MED,UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 9400 invoked from network); 23 Dec 2020 17:17:44 -0000 Received: from zero.zsh.org (2a02:898:31:0:48:4558:7a:7368) by inbox.vuxu.org with ESMTPUTF8; 23 Dec 2020 17:17:44 -0000 ARC-Seal: i=1; cv=none; a=rsa-sha256; d=zsh.org; s=rsa-20200801; t=1608743864; b=R+n08CtvgQrHLVnvfLp2iIif8BOnoY/XgEVtd/oiM2IHxI2q8M2sFQyBAROBwyyj2hS7QMm3xP aPg1CIj1cTHkwoD3hKQlqVEXOECLjdkvylP0YfTlGchcG2OKzRQWwv4VViUykfD/F2AUPse5FM QuqzMP1PDa84ElRJEyrMg4dnpYW7DtYBODphr1RGcKneOReDBMh2vydmPX04FptX3SBiv0hwpK Eh8YCfBaGn04oMR5T0tKQWDOPP5pYch3a6a+HxUaWeNgJGgH/g37XNJzGfigF3wFrTfGqcobHv NaFYnav/Zn0FYJC0bUdxOlMl5Uo0XoHOK0HpzPQS0b/KFg==; ARC-Authentication-Results: i=1; zsh.org; iprev=pass (know-smtprelay-omc-7.server.virginmedia.net) smtp.remote-ip=80.0.253.71; dkim=pass header.d=ntlworld.com header.s=meg.feb2017 header.a=rsa-sha256; dmarc=pass header.from=ntlworld.com; arc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed; d=zsh.org; s=rsa-20200801; t=1608743864; bh=INzd1wFoKreVUQSo+abqHDdlHnwgzCTBWuxjJJC2XvU=; h=List-Archive:List-Owner:List-Post:List-Unsubscribe:List-Subscribe:List-Help: List-Id:Sender:Content-Transfer-Encoding:MIME-Version:Content-Type: References:In-Reply-To:Date:To:From:Subject:Message-ID:DKIM-Signature: DKIM-Signature; b=NeK1yEZfrtNFft7lE9m5w0Th1OAFEcrFuXp8tV8pomi51K8GXPy3d7IPiwyyykHwD20BpTf2z7 R7IwyItYQa/pxpDUJn9H2YedQobo0tSCp0OiQJBTu52+Y/ZQ0hfdVln2q9K0GP4bMpLQ9fc9rl DzpQYbq14pVptK4ZGRx3iqzGadyJmC/Jro0uKiv0HtckwLfiZO5FmeWwrnEHolYWYkWept2Kvi gKo2CQriDmwPcmuunUt7TDd0oCyr/Z1WvkuoyYd6lseWEmAVPFreERzEzkkX2NNMdjoZ+CiK/S voR0CLZmbu8PAnSlpsdoFI1/t9mTDHF+/pKP4OwcTV37Yw==; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=zsh.org; s=rsa-20200801; h=List-Archive:List-Owner:List-Post:List-Unsubscribe: List-Subscribe:List-Help:List-Id:Sender:Content-Transfer-Encoding: Mime-Version:Content-Type:References:In-Reply-To:Date:To:From:Subject: Message-ID:Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From :Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID; bh=MQa34Nr/RBnvZ5HhQRBurny6W0z+oLkUBGYgtf+zyAI=; b=A+fYPefaAAi3qVFogqQsNzQHYV PEvWgpR1StevBL5Dw1uBgckZTQbwVH+vgmXwKN2HukV+KqiwwhaNS27DvEP2pt3aWdVyFz3nWc+GS 6WQ0pcP3VNqqctkAKTVpbGWBIBYvojbW8JtPB4OuZDTDZos1Bex9OyHWDh9cTQyGpKiXS2upOGORk HMEjf4g8xxaWhdwgwZLRjAJf7ABwuBcu40hmMakYGoF0PtiFHnh8R0FjYbpOq5pi7AXWIhnw7EM4d YCq3bo+TmR8xt5euAkrOXLZgc7aAZVXKTJ8qeBamxGaEmBzRTs90IzShfRzE93gP2oWcDnG/0gN8R SK7iurNg==; Received: from authenticated user by zero.zsh.org with local id 1ks7lf-000JNj-9g; Wed, 23 Dec 2020 17:17:43 +0000 Authentication-Results: zsh.org; iprev=pass (know-smtprelay-omc-7.server.virginmedia.net) smtp.remote-ip=80.0.253.71; dkim=pass header.d=ntlworld.com header.s=meg.feb2017 header.a=rsa-sha256; dmarc=pass header.from=ntlworld.com; arc=none Received: from know-smtprelay-omc-7.server.virginmedia.net ([80.0.253.71]:42403) by zero.zsh.org with esmtps (TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256) id 1ks7lP-000JEq-5G; Wed, 23 Dec 2020 17:17:28 +0000 Received: from pws-Zeus ([82.20.19.64]) by cmsmtp with ESMTPA id s7lLkPUOpzNL5s7lLkZShs; Wed, 23 Dec 2020 17:17:26 +0000 X-Originating-IP: [82.20.19.64] X-Authenticated-User: p.w.stephenson@ntlworld.com X-Spam: 0 X-Authority: v=2.3 cv=VOHzYeHX c=1 sm=1 tr=0 a=FYxK54AnRTbDA0SLc6W5Eg==:117 a=FYxK54AnRTbDA0SLc6W5Eg==:17 a=IkcTkHD0fZMA:10 a=HYshxDoSAAAA:8 a=4J2JP0vCAAAA:8 a=sfOm8-O8AAAA:8 a=EN7d1_F0GkW2SOETeoMA:9 a=QEXdDO2ut3YA:10 a=LGHt2Sja8HgA:10 a=na7qQM7zoEAPfvOk0o6d:22 a=SYiPpdTxxy6IlD5U-pk-:22 a=TvTJqdcANYtsRzA46cdi:22 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ntlworld.com; s=meg.feb2017; t=1608743846; bh=MQa34Nr/RBnvZ5HhQRBurny6W0z+oLkUBGYgtf+zyAI=; h=Subject:From:To:Date:In-Reply-To:References; b=sisRJlMrka5EqpyLx0ybIW64ZJxjje8qZI0hkb2VkCR89abEywSvMZob1j2f2uB7P GINENzQf82hC5EgBPHEfmZ3kmIW4u5pyfkYNSY31rjeuxktWUI/3d28vQu5tmj1LKD s6D10wayhytQOUG8xB6HEvIzTp/eunzijvR5P7bFEL2J8/1dGSnnTqnrFYhVQN1Nz6 XZzS1Yi4EkEAPaZQUcFvpdOlA6V8YmWkzUKC+dfAcUQekv+J500KDHH4cRbz+0zTJZ hHfBnfc1iz1Ygevn2fQ27+5Q6crRkf4y9ZjUGeEs8GwUPE35LFi9bNbjwwvGRnvJjN D/TrHc5MQ6DAA== Message-ID: <806b1f2900ba9eea0de965c9cdf68299cbc55247.camel@ntlworld.com> Subject: Re: Security From: Peter Stephenson To: zsh-workers@zsh.org Date: Wed, 23 Dec 2020 17:17:23 +0000 In-Reply-To: <9ukE0EnlTIntEcJ7b7nLSoq5E3XfeB-HtfyHk1Vmzoh_NojpSpL_amjhCixUBdb164pmStO4by1oduUBR0zCJpK0xGzrh2uz42flRXt96-8=@protonmail.com> References: <9ukE0EnlTIntEcJ7b7nLSoq5E3XfeB-HtfyHk1Vmzoh_NojpSpL_amjhCixUBdb164pmStO4by1oduUBR0zCJpK0xGzrh2uz42flRXt96-8=@protonmail.com> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.28.5-0ubuntu0.18.04.2 Mime-Version: 1.0 Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4wfOTELapo76Svr5ODZnQTnproSfDe/TjLwdhjyfAbfJDq3lNKCpJFjcYFEIZ6U/L1A+Z59HVbCNOL0mrVDEv0J3gbdyWbJ/gyievNpRMenek9yKjF/9s9 2fdmdToWFENldqTkMOIWiPvXxU4Cg88Jcidw1VVr2+zVe4F39bRFTYeZ X-Seq: 47752 Archived-At: X-Loop: zsh-workers@zsh.org Errors-To: zsh-workers-owner@zsh.org Precedence: list Precedence: bulk Sender: zsh-workers-request@zsh.org X-no-archive: yes List-Id: List-Help: List-Subscribe: List-Unsubscribe: List-Post: List-Owner: List-Archive: Archived-At: On Wed, 2020-12-23 at 05:53 +0000, reportyigit46 wrote: > Hello, > I can’t get answer from Oliver. Which one can give me answer? You might want to try zsh-infra@zsh.org which is the small number of people who have direct responsibility for the zsh site, so all of necessity trustworthy --- I don't think there's anything more specific. pws > Thank you, > > > Açık Paz, Ara 20, 2020 16:46, Jérémie Roquet yazdı: > > Hi, > > > > Le dim. 20 déc. 2020 à 14:13, reportyigit46 > > a écrit : > > > I want to share security issue. Can you share e-mail of security team ? > > > > If it's a security issue in zsh, you can get in touch with Oliver, > > Bart, and of course Peter. You might want to cc. Stephane as well, as > > he's some experience on the matter (eg. Shellshock). > > > > I've put all of them in cc. > > > > Best regards, > > > > -- > > Jérémie > >