X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type; q=dns; s=default; b=M+yYyf
	GWeboLvkbjxACq+vlpQpQNN14gjqA+ppt+TqnXCcnC0Um6nlEeT2eEo08/YM5mva
	S3IDmVPr010xrL82c7u8pQ4KFeYk1pnC+VLeb0RIpr7PRM24bB7Q6f105Lp0umTv
	dnoYAAbH3YKcBGFnFTUzd1vjxjyJe83onpWu0=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:mime-version:to:subject
	:references:in-reply-to:content-type; s=default; bh=w81EXRsPM7QH
	F7/yxl0LF2yobJQ=; b=qsTmEj3WTRDVAtdNl6zVdd7LhimFBu9AEEhoBHM2iC0i
	Wj7bjiylV/C6s/l1eTkCu62EIfO2z0SezZcuQpXzAzz3y/QA+FeO+g+YZYCSTuED
	tgehU/wn3/j1rRMSRNVlZyOfZpwIRb9/B20n22QCkYkwz6n58mSW3lK9ezg961A=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-1.3 required=5.0 tests=AWL,BAYES_00,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE autolearn=no version=3.3.2
X-HELO:	nm6-vm6.access.bullet.mail.gq1.yahoo.com
X-Yahoo-SMTP:	vUK3UKuswBCE01YQVYEZ1wHCa.HPSVCYhektzgdifA--
Message-ID:	<543068BD.2090409@bellsouth.net>
Date:	Sat, 04 Oct 2014 17:38:05 -0400
From:	Dennis Putnam <dap1 AT bellsouth DOT net>
User-Agent:	Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.6.0
MIME-Version:	1.0
To:	cygwin AT cygwin DOT com
Subject:	Re: ShellShock and Latest Version Problem
References:	<543050CF DOT 1040306 AT bellsouth DOT net> <m0pls8$166$1 AT ger DOT gmane DOT org>
In-Reply-To:	<m0pls8$166$1@ger.gmane.org>
X-IsSubscribed:	yes

--0DvXxsJTu3nOe5CGQagdnTicPO9GLoHTu
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

Thanks for the reply. I assumed that since bash was part of basic Cygin,
if I updated everything, bash would be included. I had Cygwin completely
down when I updated with setup. Why did I not get the latest bash with
the other updates? How to I get the right version of bash other than
with setup?

On 10/4/2014 4:38 PM, Ren=E9 Berber wrote:
> On 10/4/2014 2:55 PM, Dennis Putnam wrote:
>
>> According to the cygwin web site the latest version that contains
>> the shellshock patch is 1.7.32. I ran setup-x86_64.exe to get the
>> latest patches but I wind up with version 1.7.16 and nothing later
>> is found. My cygwin test indicates it is still vulnerable. How do I
>> get 1.7.32 if not through setup? TIA.
> Shellshock is related to the bash version, not the Cygwin version.
>
> If you updated Cygwin and think you still have an older version (of
> Cygwin), that probably means that you didn't stop all processes that
> use the Cygwin dll.
>
> Updating Bash doesn't affect, or depend, on the Cygwin dll.



--0DvXxsJTu3nOe5CGQagdnTicPO9GLoHTu
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iEYEARECAAYFAlQwaL0ACgkQ/fiWYqZ2tVRfdgCgwKVvXGbmC44CcQMhc1+trT4R
E9cAnA4XG6nuRo6bl3qgHAleMrNuqR/Q
=WEyX
-----END PGP SIGNATURE-----

--0DvXxsJTu3nOe5CGQagdnTicPO9GLoHTu--

- Raw text -