4 ms·

Note that Apple has not provided updates for older systems. If you have an older system and wish to patch, I have been keeping my blog post [1] updated along wi

by alblue 12y ago

Note that Apple has not provided updates for older systems. If you have an older system and wish to patch, I have been keeping my blog post [1] updated along with the canonical StackExchange answer [2]. Note that the patch from Apple allows bash functions to be escaped, albeit with a BASH_FUNC prefix - but you can get around this by using: $ env '__BASH_FUNC<ls>()'="() { echo Game Over; }" bash -c ls Game Over [1] http://alblue.bandlem.com/2014/09/bash-remote-vulnerability.html http://alblue.bandlem.com/2014/09/bash-remote-vulnerability.... [2] http://apple.stackexchange.com/questions/146849/ http://apple.stackexchange.com/questions/146849/

osxrand 12y ago
Unless you're talking about 10.6 or older : Quoted from 0x0 Also for 10.8: http://support.apple.com/kb/DL1768 http://support.apple.com/kb/DL1768 And for 10.7: http://support.apple.com/kb/DL1767 http://support.apple.com/kb/DL1767 Edit: Further information from the announcement is available here: http://lists.apple.com/archives/security-announce/2014/Sep/m.. http://lists.apple.com/archives/security-announce/2014/Sep/m.... Just posting it here incase someone reads your comment and misses 0x0's