Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Apple Releases OS X Bash Update to Fix 'Shellshock' Security Flaw in Mavericks, Mountain Lion, and Lion
- Thread starter MacRumors
- Start date
- Sort by reaction score
What! No support for us still running System 7 in Apple ][ servers? Apple doesn't care for the real pros no more!! 
Just download it from Apple directly:
http://support.apple.com/kb/DL1769?viewlocale=en_US&locale=en_US
It is highly doubtful that we will see Apple updating to current release of BASH due to GPL 3. Frankly I think they are doing the right thing in that regard. It would be nice to see them fork BASH to continue development of the GPL 2 version.
They don't need to fork or backport patches because luckily the GNU project provides patches for even older versions: http://ftp.gnu.org/gnu/bash/
bash 2.05b is from 2002 and even that one got an update.
I still have some servers running 10.2, 10.4 & 10.5 besides my desktop running 10.6
Fortunately there are some places to download binaries. I saw the tenfourfox site had some instructions for the rest of us.
Oh and how could I forget my mail server running 9.0.4!
Fortunately there are some places to download binaries. I saw the tenfourfox site had some instructions for the rest of us.
Oh and how could I forget my mail server running 9.0.4!
It's a very highly published and potently exploitable bug. You don't need to be running a server for it to be exploited.
It could, for example, be exploited by malware that you download. The bash patch should be applied by everyone.
In life, this vulnerability is THE LAST thing people should worry about. Seriously! Non issue for most users....to include Yosemite!
What about 10.6.8
So I have one old iMac that is running 10.6.8 and cannot be updated further. It is linked to a half dozen other Macs on our network. It does not look like Apple will be doing anything to protect 10.6 users. Will that put all other computers on our network at risk?
Running 27" iMac 3.4 with Mavericks 10.9.5
So I have one old iMac that is running 10.6.8 and cannot be updated further. It is linked to a half dozen other Macs on our network. It does not look like Apple will be doing anything to protect 10.6 users. Will that put all other computers on our network at risk?
Running 27" iMac 3.4 with Mavericks 10.9.5
Still not showing up for me. Could just be a delayed distribution to different user regions, but maybe it's because I had already installed the MacPorts version of bash and now Software Update thinks I don't need the update? That would be unfortunate because the installed Apple version remains vulnerable on my machine. I'll wait and see what happens in the next few hours, and then remove the MacPorts version if it still doesn't show up.
----------
No. Unless you have network services, such as Apache web server, running and accessible to the wider internet. That's rarely the case with a regular Mac. As Apple stated, only "advanced" users would be affected by this problem. Have you turned on any such advanced features and opened up additional network services to the outside world?
----------
I haven't seen it mentioned yet, but is bash installed on iOS? Is iOS vulnerable, as well, given its always-on nature?
----------
No. Unless you have network services, such as Apache web server, running and accessible to the wider internet. That's rarely the case with a regular Mac. As Apple stated, only "advanced" users would be affected by this problem. Have you turned on any such advanced features and opened up additional network services to the outside world?
----------
I haven't seen it mentioned yet, but is bash installed on iOS? Is iOS vulnerable, as well, given its always-on nature?
That's like saying that the door of my house is not safe, because someone could climb through my windows and open it from inside.
If you were stupid enough to have downloaded malware, that malware doesn't need to exploit any bugs in bash. It can just use bash.
Maybe those responsible for iOS8 will feel just a tad guilty now after just having received a pat on the back from Tim for all their hard work, in addition to 3 extra days off during Thanksgiving week?
Not saying they don't deserve it but, com'on guys….. maybe a little more intensive testing and de-bugging.
Not saying they don't deserve it but, com'on guys….. maybe a little more intensive testing and de-bugging.