Timeline for How to patch Bash on OSX in wake of "shellshock"?
Current License: CC BY-SA 3.0
14 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 13, 2017 at 12:45 | history | edited | CommunityBot |
replaced http://apple.stackexchange.com/ with https://apple.stackexchange.com/
|
|
| Feb 5, 2015 at 2:09 | comment | added | Andy Shinn | FWIW, A couple people at my current workplace followed these instructions to upgrade Bash and rendered their Macs un-bootable. We had to get in to the recovery console, unlock the Macintosh HD, and use Terminal to move the binaries back. I'm wondering if the Apple built-in bash and sh have something special needed for encrypted volumes? | |
| S Oct 1, 2014 at 2:52 | history | suggested | TrinitronX | CC BY-SA 3.0 |
Adding Official Apple patch link
|
| Oct 1, 2014 at 2:37 | review | Suggested edits | |||
| S Oct 1, 2014 at 2:52 | |||||
| Sep 26, 2014 at 9:09 | comment | added | HannesFostie | According to a colleague, brew will symlink bash anyway. On top of that if your PATH is correct, it shouldn't be much of an issue. Another thing to note is that symlinking sh to bash pretty much broke my shell entirely. I undid that one... | |
| Sep 25, 2014 at 23:22 | vote | accept | Alex Shroyer | ||
| Sep 25, 2014 at 21:46 | history | edited | Christopher Allen | CC BY-SA 3.0 |
added 124 characters in body
|
| Sep 25, 2014 at 21:39 | history | edited | Christopher Allen | CC BY-SA 3.0 |
added 124 characters in body
|
| Sep 25, 2014 at 21:31 | comment | added | Christopher Allen | I am told, but can't confirm, that Apple's default DHCP is not vulnerable to Shellshock, because the Mac's DHCP does not call a shell script when a lease has expired like it does on Linux. | |
| Sep 25, 2014 at 21:16 | comment | added | Christopher Allen | You can patch to avoid DHCP exploits if you are a sophisticated user with a Mac on the open internet, but I don't recommend that people patch unless they are actively offering web services. Just wildly taking advice and patching everything yourself is not a good idea unless you are a security professional, or there is a real need. The goal of this post was to inform people that might not be very sophisticated at the shell, but may be offering web services from their Mac that they believe is important, and thus they want this patch now. | |
| Sep 25, 2014 at 21:13 | history | edited | Christopher Allen | CC BY-SA 3.0 |
added 264 characters in body
|
| Sep 25, 2014 at 21:12 | comment | added | I'm A Person | What about possible issues with DHCP exploits? (trustedsec.com/september-2014/shellshock-dhcp-rce-proof-concept) | |
| Sep 25, 2014 at 21:08 | review | First posts | |||
| Sep 25, 2014 at 21:18 | |||||
| Sep 25, 2014 at 21:05 | history | answered | Christopher Allen | CC BY-SA 3.0 |