DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 63BFC3836C5B
MIME-Version: 1.0
References: <CAPeYm4iBym4M=ioB+o4DXnu+iF2dvyKZXB3NpipEbMDJ6Ke-VA@mail.gmail.com>
 <CAPeYm4iToeoDKPOyGuJ0gQVYes9xGh2cua3K2oEw=vC4hNGKrw@mail.gmail.com>
In-Reply-To: <CAPeYm4iToeoDKPOyGuJ0gQVYes9xGh2cua3K2oEw=vC4hNGKrw@mail.gmail.com>
Date: Thu, 25 Feb 2021 14:57:15 +0200
Message-ID: <CAPeYm4iKPZCgZyF_C49FfpLq36UAhRCmMOS8xWodRgOOicdWPQ@mail.gmail.com>
Subject: Re: Reporting security vulnerability
To: cygwin@cygwin.com
From: Evyatar Gerzi via Cygwin <cygwin@cygwin.com>
Reply-To: Evyatar Gerzi <evyatar575@gmail.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "Cygwin" <cygwin-bounces@cygwin.com>

My apologies again, I am not sure to whom I should address the
vulnerability.
Because Thomas fixed it in MinTTY but I don't know who is responsible to
implement it inside Cygwin.

I appreciate your help, thanks,

Eviatar Gerzi

On Thu, Feb 25, 2021 at 1:10 PM Evyatar Gerzi <evyatar575@gmail.com> wrote:

> Sorry, I just noticed that Thomas is one of the authors and he is already
> familiar with this issue and fixed it.
> I will send him separate mail and ask him if there is also a fix for
> Cygwin.
>
> Thanks,
>
> Eviatar
>
> On Thu, Feb 25, 2021 at 12:08 PM Evyatar Gerzi <evyatar575@gmail.com>
> wrote:
>
>> Hello,
>>
>> I saw that you have a mailing list for bug reporting but the bug that I
>> found is a security vulnerability, to whom I need to report it?
>> I don't know if it is good that it will be "read by many people", but
>> it's your call.
>>
>> Thanks,
>>
>> Eviatar Gerzi
>>
>>
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple