From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 31513 invoked by alias); 4 Oct 2014 20:38:50 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 31503 invoked by uid 89); 4 Oct 2014 20:38:49 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-0.5 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_LOW,RCVD_NUMERIC_HELO,SPF_HELO_PASS,SPF_PASS,T_FSL_HELO_BARE_IP_2,T_RP_MATCHES_RCVD autolearn=no version=3.3.2 X-HELO: plane.gmane.org Received: from plane.gmane.org (HELO plane.gmane.org) (80.91.229.3) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES256-SHA encrypted) ESMTPS; Sat, 04 Oct 2014 20:38:48 +0000 Received: from list by plane.gmane.org with local (Exim 4.69) (envelope-from ) id 1XaW6G-0006OH-Po for cygwin@cygwin.com; Sat, 04 Oct 2014 22:38:44 +0200 Received: from 189.208.17.107 ([189.208.17.107]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Sat, 04 Oct 2014 22:38:44 +0200 Received: from r.berber by 189.208.17.107 with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Sat, 04 Oct 2014 22:38:44 +0200 To: cygwin@cygwin.com From: =?windows-1252?Q?Ren=E9_Berber?= Subject: Re: ShellShock and Latest Version Problem Date: Sat, 04 Oct 2014 20:38:00 -0000 Message-ID: References: <543050CF.1040306@bellsouth.net> Mime-Version: 1.0 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.19) Gecko/20081209 Lightning/0.9 Thunderbird/2.0.0.19 Mnenhy/0.7.6.0 In-Reply-To: <543050CF.1040306@bellsouth.net> X-IsSubscribed: yes X-SW-Source: 2014-10/txt/msg00035.txt.bz2 On 10/4/2014 2:55 PM, Dennis Putnam wrote: > According to the cygwin web site the latest version that contains > the shellshock patch is 1.7.32. I ran setup-x86_64.exe to get the > latest patches but I wind up with version 1.7.16 and nothing later > is found. My cygwin test indicates it is still vulnerable. How do I > get 1.7.32 if not through setup? TIA. Shellshock is related to the bash version, not the Cygwin version. If you updated Cygwin and think you still have an older version (of Cygwin), that probably means that you didn't stop all processes that use the Cygwin dll. Updating Bash doesn't affect, or depend, on the Cygwin dll. -- René Berber -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple