From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <dbussink@github.com>
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on dcvr.yhbt.net
X-Spam-Level: 
X-Spam-Status: No, score=-3.5 required=3.0 tests=AWL,BAYES_00,DKIMWL_WL_HIGH,
	DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE,
	SPF_HELO_NONE,SPF_PASS shortcircuit=no autolearn=ham
	autolearn_force=no version=3.4.2
Received: from mail-ed1-x52a.google.com (mail-ed1-x52a.google.com [IPv6:2a00:1450:4864:20::52a])
	(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
	(No client certificate requested)
	by dcvr.yhbt.net (Postfix) with ESMTPS id D93A31F9FC
	for <unicorn-public@yhbt.net>; Wed, 17 Mar 2021 08:03:32 +0000 (UTC)
Received: by mail-ed1-x52a.google.com with SMTP id z1so1090268edb.8
        for <unicorn-public@yhbt.net>; Wed, 17 Mar 2021 01:03:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=github.com; s=google;
        h=mime-version:subject:from:in-reply-to:date:cc
         :content-transfer-encoding:message-id:references:to;
        bh=gSeMcFKP7kg5oBaojFpqkUKSIHsHiqCLr0C7DFaFQe0=;
        b=NxRIK4taCirEglk/ysLUJ8dE+MTTCUom34ezV7SsfBbibnb92PkGJBdN5gavq2rDLa
         Xyg48Kwe1zcmSNoibF/zN6zI8oHSOyJUflLTuKHqOXXugreKryG56R05U0fgQIEvmqgx
         G54ffBMLsnA0xJimVV2CucMST87HnPXvVZrAuBkv/9M8Pnm8G02oLFzIVmf+YuswbduK
         s3REc0aUHeWbXbAtaQweGap3zE0WJhz6ykUJpmACRjhA0+tW3XJnmp6OAeoE/gjQmWqN
         ZGmoOs/zBlOBALj3pkmGrlV0Hr+aoWlOEenGmdVto/7S/sUQPCghuwCB4FYg8PYyIZO0
         frnw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc
         :content-transfer-encoding:message-id:references:to;
        bh=gSeMcFKP7kg5oBaojFpqkUKSIHsHiqCLr0C7DFaFQe0=;
        b=gSUPrSh2iP5Pyz34QNGKDqu3F2gz2PTZytQqrDJ3bNCzDdkTlUetoKbGA4j0ES6PK4
         NnUER3Ni9FkWv6fvQcYS0XwOyGug7AUGUANtlbAPTU5pa3IfUPojfzgBCQmKOzFIf1Wl
         XhLJK1nZSqJ0150Z1nDHsXgRigYSeBz9WW8A4P1UjkvpCL1XgLL0BLjMkiO2e3T7TTr8
         ZUYC3tFQhPR4Ky6fGvASTWXZWF7GKI/7JBYYXZbpGDKAjbvLrxAXP1wRhL/vBsJjFCxc
         ohehv4QKa+xFiJHKC5dkDBt0rlHSAWaQhi3W/ri4C/ebh//MBr6BJJLbl/DpifOZ0oem
         /V7A==
X-Gm-Message-State: AOAM530cxx+KcwKn6Y011ayTL5iVOglYOsnOqKx6pXv21WJDfkXZKm3d
	hQSpTigU5envzRqxlZLCfZn0/w==
X-Google-Smtp-Source: ABdhPJxaCssZpnMfoWkn80kbMDZfBwzkDZB6R0qcCiBpkL/Zkc8rkn8//T4WCj0Bqeo/0H35OlVWaw==
X-Received: by 2002:aa7:cf02:: with SMTP id a2mr40062012edy.59.1615968209206;
        Wed, 17 Mar 2021 01:03:29 -0700 (PDT)
Received: from dbussink.archimedes.bussink.me (178-85-12-131.dynamic.upc.nl. [178.85.12.131])
        by smtp.gmail.com with ESMTPSA id r5sm10871979ejx.96.2021.03.17.01.03.28
        (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
        Wed, 17 Mar 2021 01:03:28 -0700 (PDT)
Content-Type: text/plain;
	charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\))
Subject: Re: Potential Unicorn vulnerability
From: Dirkjan Bussink <dbussink@github.com>
In-Reply-To: <20210316103135.GA1173@dcvr>
Date: Wed, 17 Mar 2021 09:03:27 +0100
Cc: John Crepezzi <seejohnrun@github.com>,
 Kevin Sawicki <kevinsawicki@github.com>,
 unicorn-public@yhbt.net
Content-Transfer-Encoding: 7bit
Message-Id: <6A5FDE1A-EAE5-4480-8F89-3F21B261DAAE@github.com>
References: <F6712BF3-A4DD-41EE-8252-B9799B35E618@github.com>
 <20210311030250.GA1266@dcvr>
 <7F6FD017-7802-4871-88A3-1E03D26D967C@github.com>
 <20210312094129.GA14538@dcvr>
 <382B893C-A07C-4705-950E-6D1CA766D998@github.com>
 <20210312120007.GA24539@dcvr>
 <66A68DD8-83EF-4C7A-80E8-3F1F7AB31670@github.com>
 <20210313022615.GA32198@dcvr>
 <F17132F5-2035-4396-985C-0043BF615C21@github.com>
 <20210316103135.GA1173@dcvr>
To: Eric Wong <normalperson@yhbt.net>
X-Mailer: Apple Mail (2.3608.120.23.2.4)
List-Id: <unicorn-public.yhbt.net>

Hi Eric,

> On 16 Mar 2021, at 11:31, Eric Wong <normalperson@yhbt.net> wrote:
> 
> Thanks for the update, will release in a some hours when more
> awake and able to form coherent release notes

Thanks for the release! Would you mind if we link to the release announcement
from our upcoming in depth post on what happened? 

Cheers,

Dirkjan