Bash bug aka shellshcok bug has shocked the IT community and it
has also created an alarming situation for the organizations running
Unix and Apple MAC OS. Nessus and other renowned
vulnerability assessment service providers have created solution or at least float
their services in the market, and here comes the Apple.
Apple on Monday said it has now patched
the Bash vulnerability for its OS X Lion, Mountain Lion and Mavericks
software. The company also created a site for users to
download the
Bash update.
Apple stated that most Mac users were
safe from
Shellshock as remote services like web sharing are disabled
by default. OS X Server users were not mentioned but I consider them
to be at far more risk as it is much easier to set up and enable a
web server or other remote services. However this bug was serious
enough to get Apple’s immediate attention and today they released a
software patch “OS X bash Update 1.0?. Strangely this update can
not be found through the normal software update process but has to be
downloaded from Apple’s website.
The patch was released for the last three operating systems and
can be found here:
OS X 10.7 Lion
OS X 10.8 Mountain Lion
OS X 10.9 Mavericks
No restart is required to install this security patch.