This is the mail archive of the
mailing list for the Cygwin project.
Re: ShellShock and Latest Version Problem
- From: Tim Prince <n8tm at aol dot com>
- To: cygwin at cygwin dot com
- Date: Sat, 04 Oct 2014 20:01:53 -0400
- Subject: Re: ShellShock and Latest Version Problem
- Authentication-results: sourceware.org; auth=none
- References: <543050CF dot 1040306 at bellsouth dot net> <m0pls8$166$1 at ger dot gmane dot org> <543068BD dot 2090409 at bellsouth dot net> <m0ptu0$g3g$1 at ger dot gmane dot org>
- Reply-to: tprince at computer dot org
On 10/4/2014 6:56 PM, René Berber wrote:
> On 10/4/2014 4:38 PM, Dennis Putnam wrote:
>> On 10/4/2014 4:38 PM, René Berber wrote:
>>> On 10/4/2014 2:55 PM, Dennis Putnam wrote:
>>>> According to the cygwin web site the latest version that contains
>>>> the shellshock patch is 1.7.32. I ran setup-x86_64.exe to get the
>>>> latest patches but I wind up with version 1.7.16 and nothing later
>>>> is found. My cygwin test indicates it is still vulnerable. How do I
>>>> get 1.7.32 if not through setup? TIA.
>>> Shellshock is related to the bash version, not the Cygwin version.
>>> If you updated Cygwin and think you still have an older version (of
>>> Cygwin), that probably means that you didn't stop all processes that
>>> use the Cygwin dll.
>>> Updating Bash doesn't affect, or depend, on the Cygwin dll.
>> Thanks for the reply. I assumed that since bash was part of basic Cygin,
>> if I updated everything, bash would be included. I had Cygwin completely
>> down when I updated with setup. Why did I not get the latest bash with
>> the other updates? How to I get the right version of bash other than
>> with setup?
> Use setup. Don't assume it doesn't work, it does work fine.
> Check the version available shown in setup, it its not (as of today)
> 4.1.16 then the _mirror_ you are using is stale (which would explain why
> you didn't get the latest version of Cygwin).
Slightly off topic, I tend to put off updating from setup due to the
default of rolling gcc back to an earlier (buggier, in my tests)
version. There are about 6 selections which have to be set to Keep to
avoid breaking it.
Problem reports: http://cygwin.com/problems.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple