X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:to:from:subject:date:message-id:references :mime-version:content-type:content-transfer-encoding :in-reply-to; q=dns; s=default; b=CRBCr73PBjcz0eVkalAzP4/C1Pr92Z jK8ozviLDbS1cVsvG+jQItUez0y/xLVm7X0PMSn98abasAa20CAa57BJ7gMkFPmr 14IDVoLOBNH/9JtYBwGBTpR2CpOGWGOt8OFAUZdz5BmEL2beewNHtDtvBzUD7Kuj 9YcggmHr7x1tY= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:to:from:subject:date:message-id:references :mime-version:content-type:content-transfer-encoding :in-reply-to; s=default; bh=8WGUEQ+7QZWvgkiFPI+XyA2NM8g=; b=YlrK 2ZEYDELfIC6Wwsxdg2FmXD3Qx7rLpBPoqL/Hj9nid2S9IMX1+5MD/NMPhE2z43fT lhuKk+XR5ReROVFRPq7wA/clNSrRMhD/5FkFwP12pOsr63ikrUdxCWF5gCGQfoLH 4ZYeEypBgP6eEASrurKUa6scDiia+tb/tl0XjCc= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-0.5 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_LOW,RCVD_NUMERIC_HELO,SPF_HELO_PASS,SPF_PASS,T_FSL_HELO_BARE_IP_2,T_RP_MATCHES_RCVD autolearn=no version=3.3.2 X-HELO: plane.gmane.org To: cygwin AT cygwin DOT com From: =?windows-1252?Q?Ren=E9_Berber?= Subject: Re: ShellShock and Latest Version Problem Date: Sat, 04 Oct 2014 15:38:45 -0500 Lines: 17 Message-ID: References: <543050CF DOT 1040306 AT bellsouth DOT net> Mime-Version: 1.0 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.19) Gecko/20081209 Lightning/0.9 Thunderbird/2.0.0.19 Mnenhy/0.7.6.0 In-Reply-To: <543050CF.1040306@bellsouth.net> X-IsSubscribed: yes On 10/4/2014 2:55 PM, Dennis Putnam wrote: > According to the cygwin web site the latest version that contains > the shellshock patch is 1.7.32. I ran setup-x86_64.exe to get the > latest patches but I wind up with version 1.7.16 and nothing later > is found. My cygwin test indicates it is still vulnerable. How do I > get 1.7.32 if not through setup? TIA. Shellshock is related to the bash version, not the Cygwin version. If you updated Cygwin and think you still have an older version (of Cygwin), that probably means that you didn't stop all processes that use the Cygwin dll. Updating Bash doesn't affect, or depend, on the Cygwin dll. -- René Berber -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple