X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:message-id:date:from:mime-version:to:subject :references:in-reply-to:content-type; q=dns; s=default; b=M+yYyf GWeboLvkbjxACq+vlpQpQNN14gjqA+ppt+TqnXCcnC0Um6nlEeT2eEo08/YM5mva S3IDmVPr010xrL82c7u8pQ4KFeYk1pnC+VLeb0RIpr7PRM24bB7Q6f105Lp0umTv dnoYAAbH3YKcBGFnFTUzd1vjxjyJe83onpWu0= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:message-id:date:from:mime-version:to:subject :references:in-reply-to:content-type; s=default; bh=w81EXRsPM7QH F7/yxl0LF2yobJQ=; b=qsTmEj3WTRDVAtdNl6zVdd7LhimFBu9AEEhoBHM2iC0i Wj7bjiylV/C6s/l1eTkCu62EIfO2z0SezZcuQpXzAzz3y/QA+FeO+g+YZYCSTuED tgehU/wn3/j1rRMSRNVlZyOfZpwIRb9/B20n22QCkYkwz6n58mSW3lK9ezg961A= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-1.3 required=5.0 tests=AWL,BAYES_00,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE autolearn=no version=3.3.2 X-HELO: nm6-vm6.access.bullet.mail.gq1.yahoo.com X-Yahoo-SMTP: vUK3UKuswBCE01YQVYEZ1wHCa.HPSVCYhektzgdifA-- Message-ID: <543068BD.2090409@bellsouth.net> Date: Sat, 04 Oct 2014 17:38:05 -0400 From: Dennis Putnam User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.6.0 MIME-Version: 1.0 To: cygwin AT cygwin DOT com Subject: Re: ShellShock and Latest Version Problem References: <543050CF DOT 1040306 AT bellsouth DOT net> In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="0DvXxsJTu3nOe5CGQagdnTicPO9GLoHTu" X-IsSubscribed: yes --0DvXxsJTu3nOe5CGQagdnTicPO9GLoHTu Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Thanks for the reply. I assumed that since bash was part of basic Cygin, if I updated everything, bash would be included. I had Cygwin completely down when I updated with setup. Why did I not get the latest bash with the other updates? How to I get the right version of bash other than with setup? On 10/4/2014 4:38 PM, Ren=E9 Berber wrote: > On 10/4/2014 2:55 PM, Dennis Putnam wrote: > >> According to the cygwin web site the latest version that contains >> the shellshock patch is 1.7.32. I ran setup-x86_64.exe to get the >> latest patches but I wind up with version 1.7.16 and nothing later >> is found. My cygwin test indicates it is still vulnerable. How do I >> get 1.7.32 if not through setup? TIA. > Shellshock is related to the bash version, not the Cygwin version. > > If you updated Cygwin and think you still have an older version (of > Cygwin), that probably means that you didn't stop all processes that > use the Cygwin dll. > > Updating Bash doesn't affect, or depend, on the Cygwin dll. --0DvXxsJTu3nOe5CGQagdnTicPO9GLoHTu Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (MingW32) iEYEARECAAYFAlQwaL0ACgkQ/fiWYqZ2tVRfdgCgwKVvXGbmC44CcQMhc1+trT4R E9cAnA4XG6nuRo6bl3qgHAleMrNuqR/Q =WEyX -----END PGP SIGNATURE----- --0DvXxsJTu3nOe5CGQagdnTicPO9GLoHTu--