DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:mime-version:content-type:content-transfer-encoding
	:in-reply-to; q=dns; s=default; b=CRBCr73PBjcz0eVkalAzP4/C1Pr92Z
	jK8ozviLDbS1cVsvG+jQItUez0y/xLVm7X0PMSn98abasAa20CAa57BJ7gMkFPmr
	14IDVoLOBNH/9JtYBwGBTpR2CpOGWGOt8OFAUZdz5BmEL2beewNHtDtvBzUD7Kuj
	9YcggmHr7x1tY=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
To: cygwin@cygwin.com
From: =?windows-1252?Q?Ren=E9_Berber?= <r.berber@computer.org>
Subject: Re: ShellShock and Latest Version Problem
Date: Sat, 04 Oct 2014 15:38:45 -0500
Lines: 17
Message-ID: <m0pls8$166$1@ger.gmane.org>
References: <543050CF.1040306@bellsouth.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 8bit
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.19) Gecko/20081209 Lightning/0.9 Thunderbird/2.0.0.19 Mnenhy/0.7.6.0
In-Reply-To: <543050CF.1040306@bellsouth.net>

On 10/4/2014 2:55 PM, Dennis Putnam wrote:

> According to the cygwin web site the latest version that contains
> the shellshock patch is 1.7.32. I ran setup-x86_64.exe to get the
> latest patches but I wind up with version 1.7.16 and nothing later
> is found. My cygwin test indicates it is still vulnerable. How do I
> get 1.7.32 if not through setup? TIA.

Shellshock is related to the bash version, not the Cygwin version.

If you updated Cygwin and think you still have an older version (of
Cygwin), that probably means that you didn't stop all processes that
use the Cygwin dll.

Updating Bash doesn't affect, or depend, on the Cygwin dll.
-- 
René Berber


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple