Re: zsh 5.8.1 released (CVE-2021-45444)

["Daniel Shahaf" <d.s@xxxxxxxxxxxxxxxxxx>]

dana wrote on Sun, 13 Feb 2022 10:10 +00:00:
> On 13 Feb 2022, at 02:58, david rayner <david@xxxxxxxxxxxxxx> wrote:
>> Out of curiosity what is the process by which this will filter out to the
>> various Linux & other distributions. Is it ad-hoc (I see you mention a
>> security mailing list) ?
>
> The people who maintain those distributions' zsh packages are generally
> subscribed to the mailing list, and they pull down the update when they see
> the announcement.

Note that by "the mailing list" dana meant zsh-announce@, not
zsh-security@.  The latter is used exclusively for discussing
vulnerabilities that have not yet been made public.

Cheers,

Daniel