PDA

View Full Version : Update For Shellshock



mick132
30th September 2014, 05:20 PM
Apple has updated Mavericks against the Shellshock vulnerability. You have to download the update directly from Apple.

OS X bash Update 1.0 (http://support.apple.com/kb/DL1769)

The original article: Apple Updates OS X to Protect Against Shellshock (http://mashable.com/2014/09/29/apple-shellshock-update/)

soulman
3rd October 2014, 11:36 PM
I'm still running 10.6.8 on some machines, so not eligible for an Apple patch. Did just find this article (http://tenfourfox.blogspot.com.au/2014/09/bashing-bash-one-more-time-updated.html) tonight though, for PowerPC users and anyone using 10.6.x and earlier.

It describes how to patch it, by downloading the latest version of Bash and just updating it manually, after testing for all the vulnerabilities. You have to type (or copy and paste, as I did) a series of shell commands into a Terminal window, but it's not super scary and the instructions are really clear and easy to follow. You can then run the tests again to confirm that you're in the clear.

Went fine for me, but YMMV though of course. You have to be at least basically comfortable with Terminal (which is all I am) and be able to copy text precisely, as extra spaces and/or left off quote marks could mess things up.