Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
It's potentially an opening, yes, so I do hope that bash receives further maintenance from Apple. At least the direct issue is mitigated for now.

----------



It took me 2 minutes total to add it to my deployment system. Presumably professional system administrators will be on top of this.
As for why it's not in Software Update? A huge mystery to say the least.

Wasn't hard to get into our SMS but it's peculiar that it's not in the general Software Update Catalogue after close to a day. Makes me wonder if there isn't a general security update coming soon with this rolled into it. If you are an organization that doesn't have a third party management solution and rely on an internal SUS to vet and release patches the manual patches could be a burden (though in that situation I imagine you're making liberal use of ARD).
 
Wasn't hard to get into our SMS but it's peculiar that it's not in the general Software Update Catalogue after close to a day. Makes me wonder if there isn't a general security update coming soon with this rolled into it. If you are an organization that doesn't have a third party management solution and rely on an internal SUS to vet and release patches the manual patches could be a burden (though in that situation I imagine you're making liberal use of ARD).

I was thinking the same thing--that this security fix will be in an upcoming update but not as a stand along fix in the App store.
 
I was thinking the same thing--that this security fix will be in an upcoming update but not as a stand along fix in the App store.

I reached out to our Apple Engineer but he was not privy to any information about the update schedule that hasn't already been released. Sometimes I think Apple keeps him in the dark as much as the rest of us, can't leak what you don't know I suppose.
 
only fixes 3 or 4 bugs

This patch fixes some of the more serious bugs in bash, but does not fix the taviso bug --- so hopefully we'll se another more complete patch
 
It is an easy update, but, it seems nothing short of bizarre that it isn't in software update/app store. If there is some status, such as it being an interim patch, people should know. Why is Apple being so closed-mouth about this?
 
It is an easy update, but, it seems nothing short of bizarre that it isn't in software update/app store. If there is some status, such as it being an interim patch, people should know. Why is Apple being so closed-mouth about this?

If this doesn't fix all the known attack vectors as people are saying, then this was probably a way for Apple to get an interim patch out without an official Security Update. I think Apple probably tries to limit the amount of updates they roll out because they don't want people to get update fatigue (as happened with Windows' constant flow of patches). Just a guess though.
 
To think it was so much effort to produce these binaries for Apple not only was it not the latest version of bash, they couldn't do it for as Snow Leopard and all the users who either can't update or have greatly degraded performed on their machines of updating.

Apple's stating to become a super sized scumbag and expert at squandering customer's good will. Killing the brand they built over the first decade of 21st century by inches.

I'm increasingly tempted to build me a hackintosh next time I'm looking for a computer, if I don't skip OSX all together. I'm increasing more on my Windows 8.1 install anyways at this point.

And more important, I'm very quickly reconsidering the advice I've been giving to family and friends who are not very computer literte for almost 15 years, which was "buy a Mac".
 
To think it was so much effort to produce these binaries for Apple not only was it not the latest version of bash, they couldn't do it for as Snow Leopard and all the users who either can't update or have greatly degraded performed on their machines of updating.

Apple's stating to become a super sized scumbag and expert at squandering customer's good will. Killing the brand they built over the first decade of 21st century by inches.

You gotta be kidding.

Okay, one: you won't see the "latest version of bash" on OS X because bash is now licensed using GPL v3 and Apple doesn't want to touch that. So they had to patch their older version. Maybe someday they'll move to zsh. You're certainly welcome to install your own shell on your own.

Two: Snow Leopard? It came out 5 years ago, and Apple only dropped support for it early this year. I'd say that's pretty generous. Most Macs of that timeframe, like my 2008 Mac Pro, can run Mavericks and will be able to run Yosemite.
 
I'm sorry guys

im lost - where is the patch? i can't find anything from:

Click --> :apple: --> software update --> No Update Available

BTW I'm on v10.9.5
 
Instead of apologising, why not check the previous pages of this thread for relevant posts?
 
I reached out to our Apple Engineer but he was not privy to any information about the update schedule that hasn't already been released. Sometimes I think Apple keeps him in the dark as much as the rest of us, can't leak what you don't know I suppose.

For the protection of their customers, Apple does not disclose, discuss or confirm security issues until a full investigation has occurred and any necessary patches or releases are available.

Weird that it still isn't available via the app store.
 
Two: Snow Leopard? It came out 5 years ago, and Apple only dropped support for it early this year. I'd say that's pretty generous. Most Macs of that timeframe, like my 2008 Mac Pro, can run Mavericks and will be able to run Yosemite.
Huh, even Microsoft did better on that. Win XP support was dropped after 12 or so years, and it still worked with all the weird quirks we liked on Windows /sarcasm.

To call Snow Leopard outdated is a stretch of imagination. A significant portion of users still consider it the best, most beautiful OS X ever that didn't sacrifice UNIX power in the name of iOS-ification.

Weird that it still isn't available via the app store.
Hmmm, who cares about the App Store? You make it sound like people forgot how software was downloaded in the good ol' fashioned way.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.