Previewed at WWDC, launching in the fall.
Apple Releases OS X Bash Update to Fix 'Shellshock' Security Flaw in Mavericks, Mountain Lion, and Lion
Apple today released OS X bash update 1.0 for OS X Mavericks to fix a vulnerability in the bash UNIX shell.
The security flaw, known in the media as "Shellshock," was discovered last week. Uncovered by security researchers, the exploit in the bash command shell in OS X and Linux could be used to deploy malicious code.
According to an Apple spokesperson, most OS X users were not at risk form the bash vulnerabilities, but the company promised to work quickly to provide an update.
The security flaw, known in the media as "Shellshock," was discovered last week. Uncovered by security researchers, the exploit in the bash command shell in OS X and Linux could be used to deploy malicious code.
According to an Apple spokesperson, most OS X users were not at risk form the bash vulnerabilities, but the company promised to work quickly to provide an update.
Bash, a UNIX command shell and language included in OS X, has a weakness that could allow unauthorized users to remotely gain control of vulnerable systems. With OS X, systems are safe by default and not exposed to remote exploits of bash unless users configure advanced UNIX services. We are working to quickly provide a software update for our advanced UNIX users.Along with the fix for OS X Mavericks, Apple has released updates for both OS X Lion and OS X Mountain Lion. There is no Yosemite download available as of yet, but Apple may be planning to issue a fix in the near future. The three updates are available via Apple's support pages and should be available via the Software Update tool soon.
[ 121 comments ]
Top Rated Comments
(View all)
49 months ago
sucks for yosemite users.
I wonder if Yosemite is already fixed.
Hopefully, this update won't delete documents and kill your modem...
49 months ago
Before:
$ bash --version
GNU bash, version 3.2.51(1)-release (x86_64-apple-darwin13)
After:
$ bash --version
GNU bash, version 3.2.53(1)-release (x86_64-apple-darwin13)
$ bash --version
GNU bash, version 3.2.51(1)-release (x86_64-apple-darwin13)
After:
$ bash --version
GNU bash, version 3.2.53(1)-release (x86_64-apple-darwin13)
49 months ago
Careful guys. This update disables your MacBook's keyboard.
!!@£!@$@%£^£&**(!!
49 months ago
It's a very highly published and potently exploitable bug. You don't need to be running a server for it to be exploited.
It could, for example, be exploited by malware that you download. The bash patch should be applied by everyone.
That's like saying that the door of my house is not safe, because someone could climb through my windows and open it from inside.
If you were stupid enough to have downloaded malware, that malware doesn't need to exploit any bugs in bash. It can just use bash.
49 months ago
Will this update break my wifi? Or delete all my files?
Don't be silly.
Probably wifi issues.
49 months ago
I don't see this in regular software update, isn't this important enough to show there? ;)
----------
Ok, I think this is when the rubber meets the road. This is a major security hole. Apple is big in security. It always made fun of PC because of the viruses afflicting PC machines. We are all holding our breath to hear great news about how Apple is going to tackle such a huge security hole, and then:
This is what we get:
1. Some PR announcement saying that most people are not affected, without going into details on who might be affected and how. Pathetic :(
2. Releasing a fix that apparently is not even available through regular update.
I have a Ubuntu machine and I think i have received no less than 3 updates to bash since the problem was announced.
I know that a big company has to be cautious about the fixes it releases, but this is bordering a ridiculous failure. I would expect a multibillion corporation to fix this quick and with full transparency.
My 2 cents.
----------
Ok, I think this is when the rubber meets the road. This is a major security hole. Apple is big in security. It always made fun of PC because of the viruses afflicting PC machines. We are all holding our breath to hear great news about how Apple is going to tackle such a huge security hole, and then:
This is what we get:
1. Some PR announcement saying that most people are not affected, without going into details on who might be affected and how. Pathetic :(
2. Releasing a fix that apparently is not even available through regular update.
I have a Ubuntu machine and I think i have received no less than 3 updates to bash since the problem was announced.
I know that a big company has to be cautious about the fixes it releases, but this is bordering a ridiculous failure. I would expect a multibillion corporation to fix this quick and with full transparency.
My 2 cents.
[ Read All Comments ]
Kristen Wiig is no longer set to star in an upcoming Apple comedy series due to a scheduling conflict with "Wonder Woman 1984," reports Variety. Wiig's exit from the series and the reason...
There are a few exclusive deals we have to share today, beginning with a partnership with accessory company Elevation Lab. Over on Amazon, our readers can purchase Elevation Lab's DraftTable or...
Apple today seeded the second beta of an upcoming watchOS 5 update, two weeks after releasing the first beta following the 2018 Worldwide Developers Conference Keynote and one week after releasing an...
Apple today seeded the second beta of a new tvOS 12 operating system to developers for testing purposes, two weeks after releasing the first beta following the 2018 Worldwide Developers Conference...
Keepsafe is a company behind privacy-focused iOS apps like Photo Vault, Blur for iMessages, Unlisted, and Secure VPN Proxy. Today the company expanded its suite of secure apps with the launch of...
Yahoo today announced the launch of a new Yahoo Mail website optimized for mobile devices, allowing users to access their inboxes without having to download an app on their iPhone or Android...
The latest entry in the mesh router market comes today from TP-Link, which has announced availability of the Deco M9 Plus Tri-Band Mesh Wi-Fi 2-Pack System. The router is TP-Link's newest mesh...
Ten One Design this morning debuted the Stella, a premium laptop cord that offers several compelling features over a standard extension cable for the MacBook, MacBook Pro, and other machines.
...
