Bash – How to only install security updates on debian

bashdebianSecurity

Because of the Shell Shock bug I need to make updates on some of our machines.
But I am not sure if all of the packages suggested in apt-get upgrade are OK for my system. In other words I am not sure if there are any dependencies.

Our system administrator is not here yet and we cannot contact him.
So my question is, how can I only apt-get upgrade the security updates, without having to update everything to the newest available version in debian stable?

EDIT SOLUTION
apt-get install --only-upgrade bash did the thing for me.
On one of our servers, there was still just Debian Squeeze installed.
Changing squeeze to wheezy in /etc/apt/sources.list and then running:
– apt-get update
– apt-get install --only-upgrade bash
installed the fixed bash into this older squeeze system.

Best Answer

For Squeeze use squeeze-lts if possible! (i386 and amd64 only...)

append this to your sources.list:

deb http://http.debian.net/debian squeeze-lts main contrib non-free
deb-src http://http.debian.net/debian squeeze-lts main contrib non-free

and then run

apt-get update
apt-get install -t squeeze-lts --only-upgrade bash

Here is more detail on squeeze-lts: https://wiki.debian.org/LTS/Using

If you really want to patch debian lenny check out this gist (but rather consider updating to a newer distro!)

Related Question