Apple fixed Shellshock vulnerability in OS X / ESET NOD32 Blog

Shellshock · os x

esetnod32 September 30, 2014 at 13:13

Apple fixed Shellshock vulnerability in OS X

The company released the APPLE-SA-2014-09-29-1 update, which fixes the recently discovered Shellshock vulnerability for OS X versions of Lion , Mountain Lion, and Mavericks . This update delivers a new version of the Bash v.3.2.53 interpreter and fixes two Shellshock-related vulnerabilities: CVE-2014-6271 (Stephane Chazelas) and CVE-2014-7169 (Tavis Ormandy). The first vulnerability is an initially discovered bug in Bash, which leads to the execution of improper interpreter instructions, and the second is a bug in the first patch to Bash, which also contained an error and could lead to unauthorized execution of instructions.

Tags:

Tags

#Shellshock #os x

Read Next

AI Vulnerabilities: Fake Disease Fooled ChatGPT

AI Vulnerabilities: Fake Disease Fooled ChatGPT

Researcher created a fictional disease that AI took for reality. Learn about disinformation risks in language models and how to protect against false medical advice.

From bot to web-system: Excel automation

From bot to web-system: Excel automation

Learn how to turn a Telegram bot into a scalable web application for Excel processing. Saving 150 hours/month, architecture, AI in development. Instructions for developers.

AI and human: symbiosis after the digital rupture

AI and human: symbiosis after the digital rupture

Breaking down how AI changes labor, forms homo creatoris and digital personalities. Hypotheses on symbiosis instead of replacement for developers and specialists. Read the analysis of trajectories.

Linked lists: cache misses and benchmarks

Linked lists: cache misses and benchmarks

Why linked lists are 30 times slower than arrays: analysis of cache misses, memory overhead, and optimizations. Benchmarks, code examples for middle/senior dev. Study real tests.

Integration of native code in .NET: P/Invoke, DllImport, cross-platform compatibility

Integration of native code in .NET: P/Invoke, DllImport, cross-platform compatibility

Complete guide to using native code in .NET: from DllImport to creating NuGet packages. Learn about P/Invoke, marshaling and cross-platform solutions for developers.

eBPF NetFlow traffic monitoring bare metal K8s

eBPF NetFlow traffic monitoring bare metal K8s

Setting up eBPF/XDP for NetFlow statistics: PERCPU_HASH, sharding, timers. Benchmarks and code for middle/senior dev. Master high-performance telemetry collection.

Python Password Generation: secrets instead of random

Python Password Generation: secrets instead of random

Entropy breakdown, random vulnerabilities (Mersenne Twister) and secrets advantages for cryptographically secure passwords. Practical attack and code. For developers.

Proxmox VE for Home Assistant: migration from Raspberry Pi

Proxmox VE for Home Assistant: migration from Raspberry Pi

How to migrate Home Assistant from Raspberry Pi to Proxmox VE. Step-by-step instructions for installation, BIOS setup, and creating a fault-tolerant architecture. Learn more!

Project Turntable: AI for 3D Angles in Illustrator

Project Turntable: AI for 3D Angles in Illustrator

Learn how Project Turntable in Adobe Illustrator generates 74 angles from 2D vectors with synchronization. Firefly integration, credits, comparison with Canva. Master it to speed up workflow.

Reliable Flutter Client: Solutions Outside Happy Path | Guide

Reliable Flutter Client: Solutions Outside Happy Path | Guide

How to Build a Flutter App Resilient to Real Scenarios? Three Proven Solutions for Complex Cases: Token Separation, Full Context Reset, Hybrid HTTP+WebSocket.