From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 26345 invoked by alias); 4 Oct 2014 22:56:17 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 26334 invoked by uid 89); 4 Oct 2014 22:56:17 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-0.7 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_LOW,RCVD_NUMERIC_HELO,SPF_HELO_PASS,SPF_PASS,T_FSL_HELO_BARE_IP_2,T_RP_MATCHES_RCVD autolearn=no version=3.3.2 X-HELO: plane.gmane.org Received: from plane.gmane.org (HELO plane.gmane.org) (80.91.229.3) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES256-SHA encrypted) ESMTPS; Sat, 04 Oct 2014 22:56:16 +0000 Received: from list by plane.gmane.org with local (Exim 4.69) (envelope-from ) id 1XaYFG-0002kA-TZ for cygwin@cygwin.com; Sun, 05 Oct 2014 00:56:10 +0200 Received: from 189.208.17.107 ([189.208.17.107]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Sun, 05 Oct 2014 00:56:10 +0200 Received: from r.berber by 189.208.17.107 with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Sun, 05 Oct 2014 00:56:10 +0200 To: cygwin@cygwin.com From: =?windows-1252?Q?Ren=E9_Berber?= Subject: Re: ShellShock and Latest Version Problem Date: Sat, 04 Oct 2014 22:56:00 -0000 Message-ID: References: <543050CF.1040306@bellsouth.net> <543068BD.2090409@bellsouth.net> Mime-Version: 1.0 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.19) Gecko/20081209 Lightning/0.9 Thunderbird/2.0.0.19 Mnenhy/0.7.6.0 In-Reply-To: <543068BD.2090409@bellsouth.net> X-IsSubscribed: yes X-SW-Source: 2014-10/txt/msg00037.txt.bz2 On 10/4/2014 4:38 PM, Dennis Putnam wrote: > On 10/4/2014 4:38 PM, René Berber wrote: >> On 10/4/2014 2:55 PM, Dennis Putnam wrote: >> >>> According to the cygwin web site the latest version that contains >>> the shellshock patch is 1.7.32. I ran setup-x86_64.exe to get the >>> latest patches but I wind up with version 1.7.16 and nothing later >>> is found. My cygwin test indicates it is still vulnerable. How do I >>> get 1.7.32 if not through setup? TIA. >> Shellshock is related to the bash version, not the Cygwin version. >> >> If you updated Cygwin and think you still have an older version (of >> Cygwin), that probably means that you didn't stop all processes that >> use the Cygwin dll. >> >> Updating Bash doesn't affect, or depend, on the Cygwin dll. > > Thanks for the reply. I assumed that since bash was part of basic Cygin, > if I updated everything, bash would be included. I had Cygwin completely > down when I updated with setup. Why did I not get the latest bash with > the other updates? How to I get the right version of bash other than > with setup? Use setup. Don't assume it doesn't work, it does work fine. Check the version available shown in setup, it its not (as of today) 4.1.16 then the _mirror_ you are using is stale (which would explain why you didn't get the latest version of Cygwin). -- René Berber -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple