Thanks for the reply. I assumed that since bash was part of basic Cygin,
if I updated everything, bash would be included. I had Cygwin completely
down when I updated with setup. Why did I not get the latest bash with
the other updates? How to I get the right version of bash other than
with setup?

On 10/4/2014 4:38 PM, René Berber wrote:
> On 10/4/2014 2:55 PM, Dennis Putnam wrote:
>
>> According to the cygwin web site the latest version that contains
>> the shellshock patch is 1.7.32. I ran setup-x86_64.exe to get the
>> latest patches but I wind up with version 1.7.16 and nothing later
>> is found. My cygwin test indicates it is still vulnerable. How do I
>> get 1.7.32 if not through setup? TIA.
> Shellshock is related to the bash version, not the Cygwin version.
>
> If you updated Cygwin and think you still have an older version (of
> Cygwin), that probably means that you didn't stop all processes that
> use the Cygwin dll.
>
> Updating Bash doesn't affect, or depend, on the Cygwin dll.