Ubuntu Trusty não pode atualizar o bash

Question

Estou tentando atualizar o bash para a versão mais recente para corrigir a vulnerabilidade bash, mas minha máquina parece não conseguir encontrar o novo pacote a ser instalado. Não sei o que estou fazendo errado.

user@machine:~$ env VAR='() { :;}; echo Bash is vulnerable!' bash -c "echo Bash Test"
Bash is vulnerable!
Bash Test
user@machine:~$ sudo apt-get dist-upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
0 to upgrade, 0 to newly install, 0 to remove and 0 not to upgrade.
user@machine:~$ apt-cache policy bash
bash:
  Installed: 4.3-6ubuntu1
  Candidate: 4.3-6ubuntu1
  Version table:
 *** 4.3-6ubuntu1 0
        500 http://gb.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages
        100 /var/lib/dpkg/status
user@machine:~$ sudo apt-get install bash=4.3-7ubuntu1.3 
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Version â4.3-7ubuntu1.3â for âbashâ was not found

/etc/apt/sources.list:

# deb cdrom:[Ubuntu 9.10 _Karmic Koala_ - Release amd64 (20091027)]/ karmic main restricted
# See http://help.ubuntu.com/community/UpgradeNotes for how to upgrade to
# newer versions of the distribution.

deb http://gb.archive.ubuntu.com/ubuntu/ trusty main restricted
deb-src http://gb.archive.ubuntu.com/ubuntu/ trusty main restricted

## Major bug fix updates produced after the final release of the
## distribution.

## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu
## team. Also, please note that software in universe WILL NOT receive any
## review or updates from the Ubuntu security team.
deb http://gb.archive.ubuntu.com/ubuntu/ trusty universe
deb-src http://gb.archive.ubuntu.com/ubuntu/ trusty universe

## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu
## team, and may not be under a free licence. Please satisfy yourself as to
## your rights to use the software. Also, please note that software in
## multiverse WILL NOT receive any review or updates from the Ubuntu
## security team.
deb http://gb.archive.ubuntu.com/ubuntu/ trusty multiverse
deb-src http://gb.archive.ubuntu.com/ubuntu/ trusty multiverse

## Uncomment the following two lines to add software from the 'backports'
## repository.
## N.B. software from this repository may not have been tested as
## extensively as that contained in the main release, although it includes
## newer versions of some applications which may provide useful features.
## Also, please note that software in backports WILL NOT receive any review
## or updates from the Ubuntu security team.
# deb http://gb.archive.ubuntu.com/ubuntu/ karmic-backports main restricted universe multiverse
# deb-src http://gb.archive.ubuntu.com/ubuntu/ karmic-backports main restricted universe multiverse

## Uncomment the following two lines to add software from Canonical's
## 'partner' repository.
## This software is not part of Ubuntu, but is offered by Canonical and the
## respective vendors as a service to Ubuntu users.
# deb http://archive.canonical.com/ubuntu karmic partner
# deb-src http://archive.canonical.com/ubuntu karmic partner

deb http://extras.ubuntu.com/ubuntu trusty main #Third party developers repository

    

Answer 1

Algo estava errado com as fontes em /etc/apt/sources.list . Substituí-los pela lista de exemplos do link e atualizar novamente corrigiu o problema.

    

Answer 2

Você pode precisar atualizar os metadados do pacote. Execute apt-get update && apt-get upgrade . Isso deve instalar todas as atualizações de segurança disponíveis no momento.