Apple Fixes Shellshock In OS X

jones_supa (887896) writes Apple has released the OS X Bash Update 1.0 for OS X Mavericks, Mountain Lion, and Lion, a patch that fixes the "Shellshock" bug in the Bash shell. Bash, which is the default shell for many Linux-based operating systems, has been updated two times to fix the bug, and many Linux distributions have already issued updates to their users. When installed on an OS X Mavericks system, the patch upgrades the Bash shell from version 3.2.51 to version 3.2.53. The update requires the OS X 10.9.5, 10.8.5, or 10.7.5 updates to be installed on the system first. An Apple representative told Ars Technica that OS X Yosemite, the upcoming version of OS X, will receive the patch later.

Comments

Re:I have an idea

[Anonymous Coward]

How about releasing a version of bash that has function passing disabled. That would be safer and we can find out what breaks.

If only bash were open source, one could do this themselves instead of hoping others might do it for them.

Re:that was fast

[Bing Tsher E]

Mac servers? You mean that SE/30 running the Pokeytalk network, with the Laserwriter attached to it?

Re:Exploit that only affects Mac and Linux

[Anonymous Coward]

Goood, let the butthurt flow through you.

Re:Why isn't this auto-update?

[amorsen]

Yes, the typical use case for a MacBook is serving bash scripts over HTTP. Patch quickly!

AWWWW SHEET, I think I've been HACK#ED!

[Thud457]

Where's this #%)&@@^ U2 album come from?!
I never asked for this...