[deanclatworthy]

Can anyone outline some clear steps for those of us on Debian Squeeze who have not yet got a patch?

[thaumaturgy]

Yes, you can switch to squeeze-lts and then update just bash. First, add the following two lines to your /etc/apt/sources.list:

    deb http://http.debian.net/debian/ squeeze-lts main contrib non-free
    deb-src http://http.debian.net/debian/ squeeze-lts main contrib non-free

(you do not need to change or remove any other lines from sources.list).

Then run the following command:

    apt-get update && apt-get install --only-upgrade bash

...which will update your apt sources (but not your installed software) and then will upgrade bash and only bash.

[deanclatworthy]

Thank you. This worked.

[lemming]

I just did this and got no upgrades.

[thaumaturgy]

squeeze-lts is only available for i386 or amd64 architectures, I think, or you might be hitting an out-of-date mirror. You might try http://mirror.cc.columbia.edu/debian/ instead of http://http.debian.net/debian/

[lemming]

Using Columbia didn't help either. Using uname -m shows x86_64 so I guess that's it. I'll just have to wait for another update.

[thaumaturgy]

Silly question, but did you use sudo for the apt-get? I forget to do that sometimes. Because I'm a bit stumped why you're not getting the update, you should be.