X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:reply-to:mime-version:to
	:subject:references:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=AkCE+PZ/7Dcown9t
	MOzSYeIoBdz3v2rMloSOs8+Cutx0Pq9h+3vtIfIMfqPO8AsJwtctNK3cE3xHlNXP
	V1p7pL0UUi3fWjSA0v9dMj5+7FTXx7x5oisDoT8pHPh4iJQbT6qwWtAtHTDODSCQ
	7D0y6/KQaPVzl5Avky1uM/pOFhQ=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:reply-to:mime-version:to
	:subject:references:in-reply-to:content-type
	:content-transfer-encoding; s=default; bh=5or7xap3Z45uZwPMU9yk71
	+HnuU=; b=vL0YMlmDp4HFq0pzokpfdDcMjsLu7fjrM+dUvnzeS0eEWXqQ7ynnmg
	tIJmi7iA1yU4sisoIdBHed9SN11xSY2nrWnuzqAv1KoWH7steeOo3sOJmT9sH+gl
	bKI0qxr+C4Ma2i3RRxk2iiPwkYimFN2hhe1b/oF6gCuPftxxmaMbs=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=1.6 required=5.0 tests=AWL,BAYES_50,FREEMAIL_FROM,KAM_MXURI,RCVD_IN_DNSWL_NONE,SPF_PASS,T_RP_MATCHES_RCVD autolearn=no version=3.3.2
X-HELO: omr-m05.mx.aol.com
Message-ID: <54308A71.9060609@aol.com>
Date: Sat, 04 Oct 2014 20:01:53 -0400
From: Tim Prince <n8tm AT aol DOT com>
Reply-To: tprince AT computer DOT org
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.1.2
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: ShellShock and Latest Version Problem
References: <543050CF DOT 1040306 AT bellsouth DOT net> <m0pls8$166$1 AT ger DOT gmane DOT org> <543068BD DOT 2090409 AT bellsouth DOT net> <m0ptu0$g3g$1 AT ger DOT gmane DOT org>
In-Reply-To: <m0ptu0$g3g$1@ger.gmane.org>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 8bit
x-aol-global-disposition: G
x-aol-sid: 3039ac1a7f6154308a751927
X-AOL-IP: 65.26.156.163


On 10/4/2014 6:56 PM, René Berber wrote:
> On 10/4/2014 4:38 PM, Dennis Putnam wrote:
>> On 10/4/2014 4:38 PM, René Berber wrote:
>>> On 10/4/2014 2:55 PM, Dennis Putnam wrote:
>>>
>>>> According to the cygwin web site the latest version that contains
>>>> the shellshock patch is 1.7.32. I ran setup-x86_64.exe to get the
>>>> latest patches but I wind up with version 1.7.16 and nothing later
>>>> is found. My cygwin test indicates it is still vulnerable. How do I
>>>> get 1.7.32 if not through setup? TIA.
>>> Shellshock is related to the bash version, not the Cygwin version.
>>>
>>> If you updated Cygwin and think you still have an older version (of
>>> Cygwin), that probably means that you didn't stop all processes that
>>> use the Cygwin dll.
>>>
>>> Updating Bash doesn't affect, or depend, on the Cygwin dll.
>> Thanks for the reply. I assumed that since bash was part of basic Cygin,
>> if I updated everything, bash would be included. I had Cygwin completely
>> down when I updated with setup. Why did I not get the latest bash with
>> the other updates? How to I get the right version of bash other than
>> with setup?
> Use setup.  Don't assume it doesn't work, it does work fine.
>
> Check the version available shown in setup, it its not (as of today)
> 4.1.16 then the _mirror_ you are using is stale (which would explain why
> you didn't get the latest version of Cygwin).
Slightly off topic, I tend to put off updating from setup due to the
default of rolling gcc back to an earlier (buggier, in my tests)
version.  There are about 6 selections which have to be set to Keep to
avoid breaking it.

-- 
Tim Prince


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple