4 ms·
“The vast majority of OS X users are not at risk to recently reported bash vulnerabilities… With OS X, systems are safe by default and not exposed to remote exp
by a_c_s 12y ago
“The vast majority of OS X users are not at risk to recently reported bash vulnerabilities… With OS X, systems are safe by default and not exposed to remote exploits of bash unless users configure advanced UNIX services. We are working to quickly provide a software update for our advanced UNIX users.” -Apple
Apple says they are working on a fix. Given that other vendors like RedHat had to issue multiple patches before they finally squashed the bug, I think it is far too early to claim that Apple isn't fixing this in a timely manner.
- Doji 12y agoSorry, but you have no idea what you're talking about. The first patch released took the exploit from "Know way to easily remote execute code" to "Parser error that might be exploitable but we're not sure how to actually use it". If the Linux/BSD world had stopped there, they still would have done a far better job than Apple has. But they didn't stop there. They released a second patch. And now everyone is secure. Meanwhile, the rest of the world and I are watching through our Apache logs as attackers are knocking at our front door with this exploit. If you have a OS X server and you didn't patch it already, you may already be exploited.