4

This question already has an answer here:

I upgraded my old Debian 6.0 (Squeeze) server, but still the vulnerability seems to be there:

$ env x='() { :;}; echo vulnerable' bash -c 'echo hello'
vulnerable
hello

How do I upgrade Bash to a newer version on Debian 6.0 (Squeeze)?

marked as duplicate by jasonwryan, Anthon, Renan, Ramesh, Gilles bash Sep 26 '14 at 23:29

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • did you start a new bash shell? – Anthon Sep 26 '14 at 20:34
6

To get updates on older releases you will probably need to add the Debian 6.0 (Squeeze) LTS repository to your sources.list.

To add this repository, edit /etc/apt/sources.list and add the following line to the end of the file.

deb http://ftp.us.debian.org/debian squeeze-lts main non-free contrib

Then run:

apt-get update

You should see some new sources in the list of repositories now as the update is running. Now just:

apt-get install --only-upgrade bash

Here is a listing of my sources.list file from a Squeeze server I just upgraded:

deb http://ftp.us.debian.org/debian/ squeeze main
deb-src http://ftp.us.debian.org/debian/ squeeze main

deb http://security.debian.org/ squeeze/updates main
deb-src http://security.debian.org/ squeeze/updates main

# squeeze-updates, previously known as 'volatile'
deb http://ftp.us.debian.org/debian/ squeeze-updates main
deb-src http://ftp.us.debian.org/debian/ squeeze-updates main

# Other - Adding the lsb source for security updates
deb http://http.debian.net/debian/ squeeze-lts main contrib non-free
deb-src http://http.debian.net/debian/ squeeze-lts main contrib non-free
2

source: serverfault - Can not update bash on Debian Squeeze

You must use the squeeze-lts repository in order to continue receiving updates to Debian Squeeze

To add this repository, edit /etc/apt/sources.list and add the line

deb http://ftp.us.debian.org/debian squeeze-lts main non-free contrib

(you can remove non-free and contrib if desired)

To update only bash, after running apt-get update use apt-get install bash to install just bash, instead of a complete upgrade.

Not the answer you're looking for? Browse other questions tagged or ask your own question.