I upgraded my old Debian 6.0 (Squeeze) server, but still the vulnerability seems to be there:$ env x='() { :;}; echo vulnerable' bash -c 'echo hello'vulnerablehelloHow do I upgrade Bash to a newer version on Debian 6.0 (Squeeze)?
Bash vulnerability CVE-2014-6271 (Shellshock) fix on Debian 6.0 (Squeeze)
bash;vulnerability
To get updates on older releases you will probably need to add the Debian 6.0 (Squeeze) LTS repository to your sources.list.To add this repository, edit /etc/apt/sources.list and add the following line to the end of the file.deb http://ftp.us.debian.org/debian squeeze-lts main non-free contribThen run:apt-get updateYou should see some new sources in the list of repositories now as the update is running. Now just:apt-get install --only-upgrade bashHere is a listing of my sources.list file from a Squeeze server I just upgraded:deb http://ftp.us.debian.org/debian/ squeeze maindeb-src http://ftp.us.debian.org/debian/ squeeze maindeb http://security.debian.org/ squeeze/updates maindeb-src http://security.debian.org/ squeeze/updates main# squeeze-updates, previously known as 'volatile'deb http://ftp.us.debian.org/debian/ squeeze-updates maindeb-src http://ftp.us.debian.org/debian/ squeeze-updates main# Other - Adding the lsb source for security updatesdeb http://http.debian.net/debian/ squeeze-lts main contrib non-freedeb-src http://http.debian.net/debian/ squeeze-lts main contrib non-free