undefined | Better HN

story

0 pointskazinator11y ago0 comments

I have a Debian Squeeze system. Just ran apt-get upgrade and bash wasn't upgraded at all. Just other things like CUPS, exim4, pgsql, ...

0 comments

agwa11y ago

Squeeze doesn't have regular security support anymore. A subset of packages on i386 and amd64 are receiving long term security support, but you need to enable the Squeeze LTS repo:

https://wiki.debian.org/LTS/Using

ars11y ago

It has not reached the lts mirrors yet, but you can get it from http://incoming.debian.org/debian-buildd/pool/main/b/bash/

daveloyall11y ago

As of 7:24 PM GMT the above link has the amd64 .deb for sid.

Still waiting on the i386 .deb for sid.

Your link and this link (https://security-tracker.debian.org/tracker/CVE-2014-6271) useful when considered together.

daveloyall11y ago

The i386 .deb is available!

Aaaand now I'm done checking back on this thread. Have fun, folks! :)

kazinatorOP11y ago

Thanks. dpkg --install'ed the amd64 .deb package, and the vulnerability test passes now.

cbhl11y ago

Make sure security.debian.org is in your apt sources list?

kazinatorOP11y ago

Thanks for the hint folks. My eyes glazed over when OSS people started using packages some 20 odd years ago.

My brain refuses to understand anything more than the beautiful simplicity of a tarball extracted from the / directory. :)

j / k navigate · click thread line to collapse

0 comments

agwa11y ago

Squeeze doesn't have regular security support anymore. A subset of packages on i386 and amd64 are receiving long term security support, but you need to enable the Squeeze LTS repo:

https://wiki.debian.org/LTS/Using

ars11y ago

It has not reached the lts mirrors yet, but you can get it from http://incoming.debian.org/debian-buildd/pool/main/b/bash/

daveloyall11y ago

As of 7:24 PM GMT the above link has the amd64 .deb for sid.

Still waiting on the i386 .deb for sid.

Your link and this link (https://security-tracker.debian.org/tracker/CVE-2014-6271) useful when considered together.

daveloyall11y ago

The i386 .deb is available!

Aaaand now I'm done checking back on this thread. Have fun, folks! :)

kazinatorOP11y ago

Thanks. dpkg --install'ed the amd64 .deb package, and the vulnerability test passes now.

cbhl11y ago

Make sure security.debian.org is in your apt sources list?

kazinatorOP11y ago

Thanks for the hint folks. My eyes glazed over when OSS people started using packages some 20 odd years ago.

My brain refuses to understand anything more than the beautiful simplicity of a tarball extracted from the / directory. :)

j / k navigate · click thread line to collapse