Apple Releases OS X Bash Update to Fix 'Shellshock' Security Flaw

[joedec]

Apple patched Lion, Mountain Lion and Mavericks, not Yosemite. Hopefully they'll roll the change into the release stream.

See;
https://forums.macrumors.com/threads/1792999/

Test for update with;
$ /bin/bash -c "env x='() { :;}; echo FAILED' /bin/bash -c /usr/bin/true"
FAILED

Success is no output.

 

[joedec]

Fixed in Public Beta 4

$ sw_vers
ProductName: Mac OS X
ProductVersion: 10.10
BuildVersion: 14A379b

$ /bin/bash -c "env x='() { :;}; echo FAILED' /bin/bash -c /usr/bin/true"