From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <zsh-workers-return-33245-mason-zsh=primenet.com.au@zsh.org>
Received: (qmail 4365 invoked by alias); 25 Sep 2014 13:29:18 -0000
Mailing-List: contact zsh-workers-help@zsh.org; run by ezmlm
Precedence: bulk
X-No-Archive: yes
List-Id: Zsh Workers List <zsh-workers.zsh.org>
List-Post: <mailto:zsh-workers@zsh.org>
List-Help: <mailto:zsh-workers-help@zsh.org>
X-Seq: 33245
Received: (qmail 22456 invoked from network); 25 Sep 2014 13:29:17 -0000
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on f.primenet.com.au
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_LOW
	autolearn=ham version=3.3.2
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=from:content-type:subject:date:message-id:cc:to:mime-version;
        bh=Sz1Oh5b4j7vrMv7eveknMlTsl6NBQ5Vb0j70aWS3gog=;
        b=Y6sIs0DO1eBOic5c28VdLIKazyt75E7n7HLqa4e8M2cVywRPR248biwKPIVtvly/w4
         4ARmdIwc0Ap63gLrazyq0O0o0lJJBrubBvRVMLMixjXgcBjL5IJURQfd+aaNuEHmFs/e
         PCS6lah7+cOQEhGY0pZtrLY5Fk7lS+H4h5tQDpC/37KGTpX9iz7HCmL2kyMTyqowAOvs
         yBTvZWca9+f4Vk0GyFayU9QzUYguat1CSbMF0hNTh29mZftXnQknBq5y5cOeM5LdwGVR
         TlbSe/p7cSOpXgBakH4vobsxjyhEwh6k6/zAM+C/8RrTXJv9h2B4VgWN8dqDBMIY59Ij
         1tKQ==
X-Received: by 10.224.129.201 with SMTP id p9mr18486213qas.75.1411651750630;
        Thu, 25 Sep 2014 06:29:10 -0700 (PDT)
From: Boyan Penkov <boyan.penkov@gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_16713CB9-A0CF-42DD-B879-7FB7A54022B4"
Subject: Shellshock in zsh
Date: Thu, 25 Sep 2014 09:29:08 -0400
Message-Id: <9D3C0670-6D81-4DE9-8E34-49D5835C3EA8@gmail.com>
Cc: Adrian Bradd <ab4042@columbia.edu>
To: zsh-workers@zsh.org
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\))
X-Mailer: Apple Mail (2.1878.6)

--Apple-Mail=_16713CB9-A0CF-42DD-B879-7FB7A54022B4
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=windows-1252

Hey folks,

I=92m writing to ask about zsh and Shellshock.  Since bash is affected, =
is zsh affected as well?  Two of us took a look, and we think it may be.

Specifically, following these steps =97 =
https://access.redhat.com/articles/1200223 =97 in zsh 5.0.6 on OS 10.9.5 =
and zsh 5.0.2 on OS 10.9.4 yields the =93vulnerable=94 output.

Please let us know how we may be able to help.

Cheers!
--
Boyan Penkov
www.boyanpenkov.com


--Apple-Mail=_16713CB9-A0CF-42DD-B879-7FB7A54022B4--