X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 9FB453874C08
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1614251615;
	bh=UQpnFW3TEfMQYqA97KDPg9Kpa5twVq5nMVSc09LX1zQ=;
	h=References:In-Reply-To:Date:Subject:To:List-Id:List-Unsubscribe:
	 List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:
	 From;
	b=DkpaMCdCTeapglO4gY7Z4gfCCHrdx34rZnv4Y1DgxZ6Cyns1RRgt6fxAhmmclQYl7
	 8ihmZi71afcvmNgGBWXDz2V54k6myzs1yQLw7JggP49iheJ1O3IjDmPmcNSfsTsVj8
	 ifaBfgfoxHGxkeF1/NgsLcTOooBYRyzqNVpEcz0s=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 26AA03874C08
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:mime-version:references:in-reply-to:from:date
 :message-id:subject:to;
 bh=0JDn+vUVLGtIG4I9cFvxNZl3ZRp1D4fXJTtNr3kABlE=;
 b=lOOW9FfDaOjhih68iLZp7UFiOhNm8o7fM1RsGILyhdGf1FdJ5k/aSddi3QEfzAiIhm
 7yFrQYKKcN9Uya8uscLD1iPeINfpx2vxuecVnlkq6XnKWtUiUinYuumADS9rh+YO9C/4
 hPG6dhI0/19jE9GqNf1Jzdv6MqIQxQBh2JixBtwKUa0BRfViF07PMPHmgPqu+wZERo9P
 AL3ro52bR0kViv/CiG0cnRsI9/8V0KQgnBZkRvC7AsuIxdqxTQXtOIBzzzqRXe6NbLUP
 fq3xA02pvr+3ujhEhNG1glgMa+qDMsVXEO502tWEPM0j4Eb7PhaEteDmlSOR52uLu/kS
 AR9A==
X-Gm-Message-State: AOAM533Tl3Uxu0DVTjUZkFN663R7jogyIpgo5xEjx5yxAQMnhtnhbqDE
 KhpAUOjZZ+Cpl7UHnREkOsXYs05OB90uJGPqINTrEfSFrIc=
X-Google-Smtp-Source: ABdhPJyNWPoHOydpYrM/1HW/GIIJSL/j+oQGNzf32I1UXI2+viWF7p/83uTrRkXiKW15Y7PSv50wQqbEdhJ961OkBJA=
X-Received: by 2002:aa7:ce15:: with SMTP id d21mr2302239edv.211.1614251611775; 
 Thu, 25 Feb 2021 03:13:31 -0800 (PST)
MIME-Version: 1.0
References: <CAPeYm4iBym4M=ioB+o4DXnu+iF2dvyKZXB3NpipEbMDJ6Ke-VA AT mail DOT gmail DOT com>
In-Reply-To: <CAPeYm4iBym4M=ioB+o4DXnu+iF2dvyKZXB3NpipEbMDJ6Ke-VA@mail.gmail.com>
Date: Thu, 25 Feb 2021 13:10:28 +0200
Message-ID: <CAPeYm4iToeoDKPOyGuJ0gQVYes9xGh2cua3K2oEw=vC4hNGKrw@mail.gmail.com>
Subject: Re: Reporting security vulnerability
To: cygwin AT cygwin DOT com
X-Spam-Status: No, score=-1.3 required=5.0 tests=BAYES_00, DKIM_SIGNED,
 DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_ENVFROM_END_DIGIT,
 FREEMAIL_FROM, HTML_MESSAGE, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS,
 TXREP autolearn=ham autolearn_force=no version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
 server2.sourceware.org
X-Content-Filtered-By: Mailman/MimeDel 2.1.29
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: Evyatar Gerzi via Cygwin <cygwin AT cygwin DOT com>
Reply-To: Evyatar Gerzi <evyatar575 AT gmail DOT com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "Cygwin" <cygwin-bounces AT cygwin DOT com>

Sorry, I just noticed that Thomas is one of the authors and he is already
familiar with this issue and fixed it.
I will send him separate mail and ask him if there is also a fix for Cygwin.

Thanks,

Eviatar

On Thu, Feb 25, 2021 at 12:08 PM Evyatar Gerzi <evyatar575 AT gmail DOT com> wrote:

> Hello,
>
> I saw that you have a mailing list for bug reporting but the bug that I
> found is a security vulnerability, to whom I need to report it?
> I don't know if it is good that it will be "read by many people", but it's
> your call.
>
> Thanks,
>
> Eviatar Gerzi
>
>
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple