This is the mail archive of the cygwin mailing list for the Cygwin project.

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: ShellShock and Latest Version Problem

On 10/4/2014 4:38 PM, Dennis Putnam wrote:
> On 10/4/2014 4:38 PM, René Berber wrote:
>> On 10/4/2014 2:55 PM, Dennis Putnam wrote:
>>> According to the cygwin web site the latest version that contains
>>> the shellshock patch is 1.7.32. I ran setup-x86_64.exe to get the
>>> latest patches but I wind up with version 1.7.16 and nothing later
>>> is found. My cygwin test indicates it is still vulnerable. How do I
>>> get 1.7.32 if not through setup? TIA.
>> Shellshock is related to the bash version, not the Cygwin version.
>> If you updated Cygwin and think you still have an older version (of
>> Cygwin), that probably means that you didn't stop all processes that
>> use the Cygwin dll.
>> Updating Bash doesn't affect, or depend, on the Cygwin dll.
> Thanks for the reply. I assumed that since bash was part of basic Cygin,
> if I updated everything, bash would be included. I had Cygwin completely
> down when I updated with setup. Why did I not get the latest bash with
> the other updates? How to I get the right version of bash other than
> with setup?

Use setup.  Don't assume it doesn't work, it does work fine.

Check the version available shown in setup, it its not (as of today)
4.1.16 then the _mirror_ you are using is stale (which would explain why
you didn't get the latest version of Cygwin).
René Berber

Problem reports:
Unsubscribe info:

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]