Slashdot Mirror


Apple Yet To Push Patch For "Shellshock" Bug

An anonymous reader writes "Open source operating systems vulnerable to the Shellshock bug have already pushed two patches to fix the vulnerability, but Apple has yet to issue one for Mac OS X. Ars Technica speculates that licensing issues may be giving Apple pause: "[T]he current [bash] version is released under the GNU Public License version 3 (GPLv3). Apple has avoided bundling GPLv3-licensed software because of its stricter license terms....Apple executives may feel they have to have their own developers make modifications to the bash code."" It's also worth noting that there are still flaws with the patches issued so far. Meanwhile, Fedora Magazine has published an easy-to-follow description of how Shellshock actually works. The Free Software Foundation has also issued a statement about Shellshock.

3 of 208 comments (clear)

  1. Sounds like Apple. by Anonymous Coward · · Score: 0, Troll

    Did anyone expect differently?

  2. Re: ~/.cshrc by Anonymous Coward · · Score: 0, Troll

    "...mac fags can shove their os up their asses..."

    And with that, the fact you even exist is deemed irrelevant because you've demonstrated your opinion is emotion-based and immature. Go back to Facebook and let the adults speak.

  3. Re:~/.cshrc by aaaaaaargh! · · Score: 0, Troll

    I've used it a lot for many years, starting from the very first version on until I became appalled by Apple a few years ago. I even still actively develop and sell an application for it. Unfortunately, based on my extensive experience with OS X, I have to say that it is a big pile of shit. Your mileage might differ, though. In the end it doesn't matter. It's just an operating system among many, providing a basic hardware abstraction layer for end-user applications, so who would care anyway.