4 ms·
> If the above command outputs the current date (it may also show errors), you are still vulnerable. Well, it does, and no amount of apt-get update / install b
by dorfsmay 12y ago
> If the above command outputs the current date (it may also show errors), you are still vulnerable.
Well, it does, and no amount of apt-get update / install bash is fixing it.
Is there a fix for this new issue?
Do we know when it's going to be available in the big distros?
- dorfsmay 12y agoAlso, does Apple intend to release a fix for OS X?
- bennyg 12y agoI think you should use homebrew to get an update. Apple hasn't updated bash since like 2007.
- saidajigumi 12y agoYes: http://www.imore.com/apple-working-quickly-protect-os-x-against-shellshock-exploit http://www.imore.com/apple-working-quickly-protect-os-x-agai... They're working on getting a patch out. I'm disappointed with how Apple downplays the risk in their public statement. Some of the vectors for vulnerability are pretty insidious (e.g. the DHCP client vuln). Worth noting, it appears that OS X DHCP is not vulnerable to shellshock[1]. [1] http://complexitydaemon.wordpress.com/2014/09/26/bash-os-x-dhcp-and-you/ http://complexitydaemon.wordpress.com/2014/09/26/bash-os-x-d...