From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 12883 invoked by alias); 4 Oct 2014 19:55:58 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 12874 invoked by uid 89); 4 Oct 2014 19:55:57 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-1.2 required=5.0 tests=AWL,BAYES_00,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE autolearn=no version=3.3.2 X-HELO: nm21-vm10.access.bullet.mail.bf1.yahoo.com Received: from nm21-vm10.access.bullet.mail.bf1.yahoo.com (HELO nm21-vm10.access.bullet.mail.bf1.yahoo.com) (216.109.115.137) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES128-SHA encrypted) ESMTPS; Sat, 04 Oct 2014 19:55:57 +0000 Received: from [66.196.81.163] by nm21.access.bullet.mail.bf1.yahoo.com with NNFMP; 04 Oct 2014 19:55:55 -0000 Received: from [98.138.104.96] by tm9.access.bullet.mail.bf1.yahoo.com with NNFMP; 04 Oct 2014 19:55:55 -0000 Received: from [127.0.0.1] by smtp116.sbc.mail.ne1.yahoo.com with NNFMP; 04 Oct 2014 19:55:54 -0000 X-Yahoo-SMTP: vUK3UKuswBCE01YQVYEZ1wHCa.HPSVCYhektzgdifA-- Message-ID: <543050CF.1040306@bellsouth.net> Date: Sat, 04 Oct 2014 19:55:00 -0000 From: Dennis Putnam User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.6.0 MIME-Version: 1.0 To: cygwin@cygwin.com Subject: ShellShock and Latest Version Problem Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="K6aPASUBLqiI5N9bI5i3X2fQF9tHjJewI" X-IsSubscribed: yes X-SW-Source: 2014-10/txt/msg00034.txt.bz2 --K6aPASUBLqiI5N9bI5i3X2fQF9tHjJewI Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-length: 306 According to the cygwin web site the latest version that contains the shellshock patch is 1.7.32. I ran setup-x86_64.exe to get the latest patches but I wind up with version 1.7.16 and nothing later is found. My cygwin test indicates it is still vulnerable. How do I get 1.7.32 if not through setup? TIA. --K6aPASUBLqiI5N9bI5i3X2fQF9tHjJewI Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" Content-length: 196 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (MingW32) iEYEARECAAYFAlQwUM8ACgkQ/fiWYqZ2tVQvKgCfXsnsfw/+fClkyhVmcUS2xw0g EZsAn3MaK3UZtnc1/AOJQgxKxlevVDHw =o+P3 -----END PGP SIGNATURE----- --K6aPASUBLqiI5N9bI5i3X2fQF9tHjJewI--