From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-1.3 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, MAILING_LIST_MULTI,PDS_TONAME_EQ_TOLOCAL_SHORT,RCVD_IN_DNSWL_MED, UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 2431 invoked from network); 20 Dec 2020 13:47:22 -0000 Received: from zero.zsh.org (2a02:898:31:0:48:4558:7a:7368) by inbox.vuxu.org with ESMTPUTF8; 20 Dec 2020 13:47:22 -0000 ARC-Seal: i=1; cv=none; a=rsa-sha256; d=zsh.org; s=rsa-20200801; t=1608472042; b=xborpkTmE2zR7BO9+jvX65PHOVyjNmGyuunpqKSUDsO2DVQ3+BUN3R4ddNOJ3AeCAJOeY+o6FL kDFP0BTDH1mrW7geo0WPJm9pUToCHzhW711urZKmD6SH+smu35ShWk3Ozn289EneB2Juufstom KNEkFZ8i6lF7FFbp7itsmE0mpMiO4evZGan09cshnRA14AwEiZ3Ssnx1T+PUTwOQ3N+5bNZE32 b4xnAkiC/JSuo/COnnjcBSFBbk4heQ8si3iiI/+CgYA3TfxfmJX9FRCPbI2B8Bb/iX+EbT8lSg SgRGHxlU9G5/+/UF+nzcfWSPE0UOGDgIhncsI9gHVIBIiw==; ARC-Authentication-Results: i=1; zsh.org; iprev=pass (mail-qt1-f171.google.com) smtp.remote-ip=209.85.160.171; dmarc=none header.from=arkanosis.net; arc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed; d=zsh.org; s=rsa-20200801; t=1608472042; bh=1Y+fI9f7k+yK+gx+Usp/Mdx+qudoeNHHlTu6Fi+fhX4=; h=List-Archive:List-Owner:List-Post:List-Unsubscribe:List-Subscribe:List-Help: List-Id:Sender:Content-Transfer-Encoding:Content-Type:Cc:To:Subject: Message-ID:Date:From:In-Reply-To:References:MIME-Version:DKIM-Signature; b=D73/bI4CGmkVHFGvTJqsryDWNf70D4XFDeMbsu8u6YLiZ93YiobheoAoEDjEycc8x0K2WriRpI nW+E8IdUwhzG9LR/jrZunhtyLp4K53BnAfpzaJBsG5Gg3i+pU4ufkwXkw2IpJnipKQOnyjg7v+ uTzj+sc4qK0ONULgenfafYB8eNICMi6wRGhwP9PiEf3uZRCuwybBfa4SGIssdWeNxOyj/C/G9M fUQuJu2r1KvFbIXfC3IwUhZlEdK7T64TFFs//EYPZka1yUmS5QxV1DnoOzmihhPRoHX/xJCiGJ vcIChfUPMVVw/r3FU5W1HvW40uL0xGO9epBMgZxUPMTdFw==; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=zsh.org; s=rsa-20200801; h=List-Archive:List-Owner:List-Post:List-Unsubscribe: List-Subscribe:List-Help:List-Id:Sender:Content-Transfer-Encoding: Content-Type:Cc:To:Subject:Message-ID:Date:From:In-Reply-To:References: MIME-Version:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID; bh=1Y+fI9f7k+yK+gx+Usp/Mdx+qudoeNHHlTu6Fi+fhX4=; b=ht09+RSI2R5mwsCq3+d48YpGRB iGMPD+w0IzUXk7YTTxZbWoh0JmOkGRNgGxYxYy2vVTlWr5prIuRLLf/xw0Y+pNX5N9RCltMqCTM63 8QpJqUd2vRoSyIEbq0QtSGsEeup2VwpNG2B7zJDwHn+8rZpiqzlAMQM9Pl5fhllrlt8EhH5wTHNPD cbJ55Xgge0VtYPEU6Lns0TzeXVz/GmFHrssz+6Ft9QQLW9KGNA3MrqNvFOtqZi3Vem4TEUuyn3bgu is/ykfNOCvCvJusKEwcGHG6Ukqx0WzwlD49XCrQFqXcUpGH30oFu6mE3NpDw9EwUgZT6kkXTx+Daz tA5+bDmg==; Received: from authenticated user by zero.zsh.org with local id 1kqz3S-0006v2-AO; Sun, 20 Dec 2020 13:47:22 +0000 Authentication-Results: zsh.org; iprev=pass (mail-qt1-f171.google.com) smtp.remote-ip=209.85.160.171; dmarc=none header.from=arkanosis.net; arc=none Received: from mail-qt1-f171.google.com ([209.85.160.171]:35262) by zero.zsh.org with esmtps (TLS1.3:TLS_AES_128_GCM_SHA256:128) id 1kqz3C-0006m9-92; Sun, 20 Dec 2020 13:47:06 +0000 Received: by mail-qt1-f171.google.com with SMTP id b9so4906517qtr.2; Sun, 20 Dec 2020 05:47:05 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=1Y+fI9f7k+yK+gx+Usp/Mdx+qudoeNHHlTu6Fi+fhX4=; b=kFUVd+Oqg547qx3QaQwoqp+czB12n8n5Ec8lgOtSXLpyDNfUZiVVj4i1jOCQ32Camh YvCK5gK/gGFzkaLgIgNuicfIuomCT0+Eg1hsXBGVwFt+ajYCE7bdc6JPaOM5/Q9gN0nc 01XRclBz+h1Gx24E5jplcX+ZwNyWbH0/CGQyTt2ES/lHhZOHweQCOHudaUYUyEpzTMPv UvRM5G1KooKC4Tg5gjWFGJdr2aM1qTyh/kEkcDeRj1+Vf6VVRYdFrww3IS9CO87PbexI VXOVZ+fU5Cnsz8KMMa1mjIsTi0NS8WgmpbO0MLSVGPO2oWjtzIfOunFU+cekLZWS55dW J1dw== X-Gm-Message-State: AOAM531Gyd8pVvutfL/Y54AFgyBzUU+OLxTV4Ablc5J+5Nyitcu44WFe C3KMsOFEf3ikrVYwlu1Toy774fKbFQxwrxbzsoo= X-Google-Smtp-Source: ABdhPJw81otPlter3iY7PIgi46wbxztPy+UmNdTdDsrv11Phy9HF5B9cBS3FY1/jb6mJoEWWZSX4oEDnLNqLqrffUes= X-Received: by 2002:ac8:7093:: with SMTP id y19mr12991648qto.212.1608472025089; Sun, 20 Dec 2020 05:47:05 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: =?UTF-8?B?SsOpcsOpbWllIFJvcXVldA==?= Date: Sun, 20 Dec 2020 14:46:54 +0100 Message-ID: Subject: Re: Security To: reportyigit46 Cc: "zsh-workers@zsh.org" , Oliver Kiddle , Bart Schaefer , Peter Stephenson , Stephane Chazelas Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Seq: 47750 Archived-At: X-Loop: zsh-workers@zsh.org Errors-To: zsh-workers-owner@zsh.org Precedence: list Precedence: bulk Sender: zsh-workers-request@zsh.org X-no-archive: yes List-Id: List-Help: List-Subscribe: List-Unsubscribe: List-Post: List-Owner: List-Archive: Archived-At: Hi, Le dim. 20 d=C3=A9c. 2020 =C3=A0 14:13, reportyigit46 a =C3=A9crit : > I want to share security issue. Can you share e-mail of security team ? If it's a security issue in zsh, you can get in touch with Oliver, Bart, and of course Peter. You might want to cc. Stephane as well, as he's some experience on the matter (eg. Shellshock). I've put all of them in cc. Best regards, --=20 J=C3=A9r=C3=A9mie