X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:to:from:subject:date:message-id:references :mime-version:content-type:content-transfer-encoding :in-reply-to; q=dns; s=default; b=GSAV2q5XooW4I1YVaJeXJQCFi1R94d CMIRhx5qk+4ZeTdI+04MEQ0OsPWyISUzqn9QwEALKrM1S4zPZkbcuq9xYzXBq2e7 hoB60ldy6m44Zq1Dxq/zPr2wCNqLl9YGZrr6fX/KOKCeG0isA7VQYZ2cughxo52v 5gThEua1Y0np8= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:to:from:subject:date:message-id:references :mime-version:content-type:content-transfer-encoding :in-reply-to; s=default; bh=ZTFn/ySkFYhJfs3jY5jyi/E69l4=; b=oSh6 7NyqEgtUkx+4ScLQtAdMepMkgjhIMub9rV965G1PO5nbf5/bfHg218x6au/CInh3 l1RGpTD5wxIFF1+rp3drr9iQcVKlfQ5aLXJajP3eYBkBNez8SbwTNdWFmED/rO+a sHQlG74tyXblffgtg5CoW4Kf4GaDO/DhI/2GLqc= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-0.7 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_LOW,RCVD_NUMERIC_HELO,SPF_HELO_PASS,SPF_PASS,T_FSL_HELO_BARE_IP_2,T_RP_MATCHES_RCVD autolearn=no version=3.3.2 X-HELO: plane.gmane.org To: cygwin AT cygwin DOT com From: =?windows-1252?Q?Ren=E9_Berber?= Subject: Re: ShellShock and Latest Version Problem Date: Sat, 04 Oct 2014 17:56:14 -0500 Lines: 30 Message-ID: References: <543050CF DOT 1040306 AT bellsouth DOT net> <543068BD DOT 2090409 AT bellsouth DOT net> Mime-Version: 1.0 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.19) Gecko/20081209 Lightning/0.9 Thunderbird/2.0.0.19 Mnenhy/0.7.6.0 In-Reply-To: <543068BD.2090409@bellsouth.net> X-IsSubscribed: yes On 10/4/2014 4:38 PM, Dennis Putnam wrote: > On 10/4/2014 4:38 PM, René Berber wrote: >> On 10/4/2014 2:55 PM, Dennis Putnam wrote: >> >>> According to the cygwin web site the latest version that contains >>> the shellshock patch is 1.7.32. I ran setup-x86_64.exe to get the >>> latest patches but I wind up with version 1.7.16 and nothing later >>> is found. My cygwin test indicates it is still vulnerable. How do I >>> get 1.7.32 if not through setup? TIA. >> Shellshock is related to the bash version, not the Cygwin version. >> >> If you updated Cygwin and think you still have an older version (of >> Cygwin), that probably means that you didn't stop all processes that >> use the Cygwin dll. >> >> Updating Bash doesn't affect, or depend, on the Cygwin dll. > > Thanks for the reply. I assumed that since bash was part of basic Cygin, > if I updated everything, bash would be included. I had Cygwin completely > down when I updated with setup. Why did I not get the latest bash with > the other updates? How to I get the right version of bash other than > with setup? Use setup. Don't assume it doesn't work, it does work fine. Check the version available shown in setup, it its not (as of today) 4.1.16 then the _mirror_ you are using is stale (which would explain why you didn't get the latest version of Cygwin). -- René Berber -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple