OS X gets Bash updated

[lubblig]

Just wanted to let anyone who uses OS X and bash know that there is an update for it now.

 

Apple released this on September 29th, 2014.

 

System requirements: OS X Mavericks v10.9.5 or later

(THIS DOES NOT WORK ON YOSEMITE)

 

You can get it here: http://support.apple.com/kb/DL1769

 

I haven't tried it yet myself since my Mac has been turned off for a while.

 

So I don't know if the tests that "should" tell you if shell shock works still works after the patch or not but it's worth a try. (I guess they wouldn't release an update that didn't work. I just cannot confirm it myself, that is all I'm saying.)

 

One test you could run is:

 

You can test your system by running this test command from Terminal:

 

env x='() { :;}; echo vulnerable' bash -c 'echo hello'

 

If you're not vulnerable, you'll get this result:

 

bash: warning: x: ignoring function definition attempt bash: error

importing function definition for `x' hello

 

If you are vulnerable, you'll get:

 

vulnerable hello

 

 

 

Source for testing shell shock bug in Bash and more info: http://lifehacker.com/how-to-check-if-your-mac-or-linux-machine-is-vulnerable-1639211806

[ohJey]

I checked my ubuntu server and did apt-get update/upgrade and it was instantly fixed.  This was a few days ago though Ubuntu FTW

[Redheadsrule13]

Going to do this now, I'll tell you how it goes.

EDIT: Gotta wait for the OS to update before I can patch it

[metal_remco]

I installed the patch, when I enter the command of the OP, it displayed hello, but it doesn't display the bash warning code.

[Redheadsrule13]

Worked like a charm.
Pre patch:

 

Post patch:

[lubblig]

Bash fails to update for me since I have the developer preview of Yosemite (10.10). Instead of Mavericks which is 10.9. So that was disappointing.

 

Especially since it says 10.9 or later. But I guess I'll have to wait.

 

Just wanted to let you know that this is, only for Mavericks, not Yosemite.