Patches for 'bash' Shell Vulnerability

2014-10-07 • SEND FEEDBACK |
Related: Apple, Apple Core Rot, Apple macOS, security

Adam Engst over at Tidbits.com has a detailed article on patching the Apple 'bash' shell vulnerability in How to Test Bash for Shellshock Vulnerabilities and Apple Updates Bash for the Shellshock Vulnerability.

Checking for the vulnerability

Paste these lines into a Terminal window to check for one of the vulnerabilities; there are apparently six different issues.

env x='() { :;}; echo VULNERABLE' bash -c "echo patched NOT vulnerable"

The patch

Why Apple forces a manual download update and not an automated Apple Software Update fix remains unclear. Downloads:

• OS X bash Update 1.0 - OS X Lion & OS X Lion Server
• OS X bash Update 1.0 – OS X Mountain Lion
• OS X bash Update 1.0 – OS X Mavericks