From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 27627 invoked by alias); 5 Oct 2014 00:02:02 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 27609 invoked by uid 89); 5 Oct 2014 00:02:01 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=1.6 required=5.0 tests=AWL,BAYES_50,FREEMAIL_FROM,KAM_MXURI,RCVD_IN_DNSWL_NONE,SPF_PASS,T_RP_MATCHES_RCVD autolearn=no version=3.3.2 X-HELO: omr-m05.mx.aol.com Received: from omr-m05.mx.aol.com (HELO omr-m05.mx.aol.com) (64.12.143.79) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES256-SHA encrypted) ESMTPS; Sun, 05 Oct 2014 00:02:00 +0000 Received: from mtaout-aaf01.mx.aol.com (mtaout-aaf01.mx.aol.com [172.26.127.97]) by omr-m05.mx.aol.com (Outbound Mail Relay) with ESMTP id 029BD70000096 for ; Sat, 4 Oct 2014 20:01:58 -0400 (EDT) Received: from [192.168.0.3] (cpe-65-26-156-163.cinci.res.rr.com [65.26.156.163]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mtaout-aaf01.mx.aol.com (MUA/Third Party Client Interface) with ESMTPSA id 64C9438000086 for ; Sat, 4 Oct 2014 20:01:57 -0400 (EDT) Message-ID: <54308A71.9060609@aol.com> Date: Sun, 05 Oct 2014 00:02:00 -0000 From: Tim Prince Reply-To: tprince@computer.org User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.1.2 MIME-Version: 1.0 To: cygwin@cygwin.com Subject: Re: ShellShock and Latest Version Problem References: <543050CF.1040306@bellsouth.net> <543068BD.2090409@bellsouth.net> In-Reply-To: Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit x-aol-global-disposition: G x-aol-sid: 3039ac1a7f6154308a751927 X-AOL-IP: 65.26.156.163 X-SW-Source: 2014-10/txt/msg00038.txt.bz2 On 10/4/2014 6:56 PM, René Berber wrote: > On 10/4/2014 4:38 PM, Dennis Putnam wrote: >> On 10/4/2014 4:38 PM, René Berber wrote: >>> On 10/4/2014 2:55 PM, Dennis Putnam wrote: >>> >>>> According to the cygwin web site the latest version that contains >>>> the shellshock patch is 1.7.32. I ran setup-x86_64.exe to get the >>>> latest patches but I wind up with version 1.7.16 and nothing later >>>> is found. My cygwin test indicates it is still vulnerable. How do I >>>> get 1.7.32 if not through setup? TIA. >>> Shellshock is related to the bash version, not the Cygwin version. >>> >>> If you updated Cygwin and think you still have an older version (of >>> Cygwin), that probably means that you didn't stop all processes that >>> use the Cygwin dll. >>> >>> Updating Bash doesn't affect, or depend, on the Cygwin dll. >> Thanks for the reply. I assumed that since bash was part of basic Cygin, >> if I updated everything, bash would be included. I had Cygwin completely >> down when I updated with setup. Why did I not get the latest bash with >> the other updates? How to I get the right version of bash other than >> with setup? > Use setup. Don't assume it doesn't work, it does work fine. > > Check the version available shown in setup, it its not (as of today) > 4.1.16 then the _mirror_ you are using is stale (which would explain why > you didn't get the latest version of Cygwin). Slightly off topic, I tend to put off updating from setup due to the default of rolling gcc back to an earlier (buggier, in my tests) version. There are about 6 selections which have to be set to Keep to avoid breaking it. -- Tim Prince -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple