Re: bash vulnerability jessie

[Harry Putnam <reader@newsguy.com>]

The Wanderer <wanderer@fastmail.fm> writes:

> I have (trimmed for brevity):
>
> ========
> $ apt-cache policy bash
> bash:
>   Installed: 4.3-9.1
>
> $ bash --version
> GNU bash, version 4.3.25(1)-release (x86_64-pc-linux-gnu)
> ========
>
> This is as of just over 3 hours ago as I type this.

I'm not sure what that means exactly... the different version numbers
above.

But here.... After finishing the post you quote above... I again ran 
`aptitude full-upgrade' (this is minutes ago)
And there were no packages shown and nothing was done.
To remove any doubt about environment I rebooted following the actions
mentioned above.  Here is my info compared to yours

apt-cache policy bash 

  bash:
    Installed: 4.3-9
    Candidate: 4.3-9
    Version table:
   *** 4.3-9 0
          500 http://ftp.us.debian.org/debian/ testing/main i386 Packages
          100 /var/lib/dpkg/status
       4.2+dfsg-0.1 0
          500 http://ftp.us.debian.org/debian/ wheezy/main i386 Packages

(my sources.list included wheeze due to some wheezy pkgs on board)

  bash --version
   GNU bash, version 4.3.24(1)-release (i586-pc-linux-gnu)

Perhaps you are closer to the outwardly propogating changes?

-------       -------       ---=---       -------       ------- 

PS - I don't really understand the version differences in apt-cache
policy and `bash --version'.