From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-ej1-x633.google.com (mail-ej1-x633.google.com [IPv6:2a00:1450:4864:20::633]) by sourceware.org (Postfix) with ESMTPS id 133CB3854800 for ; Thu, 25 Feb 2021 10:12:01 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 133CB3854800 Received: by mail-ej1-x633.google.com with SMTP id mm21so7596248ejb.12 for ; Thu, 25 Feb 2021 02:12:01 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=/qnZqTz6K7iN+lOsZnWN7Z5dkSuOspjmmyFMyb6Ob2U=; b=HI09aRK4qXn1B7w5gIQlHOSA3+iNT42feU3POPvyJ9qeJ2DBuB2TxvWkQcatBjh9IZ 0XkZh9OY7ygJWMc8X1ghz1FpsN1d53EBEyhK3cuABR9JXjx1XTIXEXgEFVVZHCu4B2dD SHgrV9/t/FqKBYRx7kyNceL0AxxZbmHtXvFGzj8CJzkBJyANhQOqrWTgsJjyXYJN/fbO nPkN8HNNGUXvhR2/UTXUdVsRsyEyNVP6OOENVJrrqMlCecx/ZsF1POrMAiJOY4t0HY8q QIdlEeKN2XHnj2DbYVGyFZFZfbrbQGunRPa0VK2lHdBCB1VSdqG06sTFQnq3lMpFgsST qIkA== X-Gm-Message-State: AOAM530hCXHqU5Be9x5QbeXdvV0+e4/UhVDbVsYzXPIj0gKuomgGY3v4 UfoYSUZ4DrCGUlni63dvzZLHgffedjiZvoWiXPbW/4lHg44= X-Google-Smtp-Source: ABdhPJzefrcAQ4PaWdChRux3Wq/JCFGd8OZlfXlGDcfSufyacrU7NTSTNuubuygjjXmQ5zU1olg+Vw0tYDgduZV7k7M= X-Received: by 2002:a17:906:c210:: with SMTP id d16mr1905285ejz.187.1614247919812; Thu, 25 Feb 2021 02:11:59 -0800 (PST) MIME-Version: 1.0 From: Evyatar Gerzi Date: Thu, 25 Feb 2021 12:08:56 +0200 Message-ID: Subject: Reporting security vulnerability To: cygwin@cygwin.com X-Spam-Status: No, score=-1.6 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_ENVFROM_END_DIGIT, FREEMAIL_FROM, HTML_MESSAGE, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=ham autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on server2.sourceware.org Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: cygwin@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: General Cygwin discussions and problem reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Feb 2021 10:12:02 -0000 Hello, I saw that you have a mailing list for bug reporting but the bug that I found is a security vulnerability, to whom I need to report it? I don't know if it is good that it will be "read by many people", but it's your call. Thanks, Eviatar Gerzi