
Apple fixed Shellshock vulnerability in OS X
The company released the APPLE-SA-2014-09-29-1 update, which fixes the recently discovered Shellshock vulnerability for OS X versions of Lion , Mountain Lion, and Mavericks . This update delivers a new version of the Bash v.3.2.53 interpreter and fixes two Shellshock-related vulnerabilities: CVE-2014-6271 (Stephane Chazelas) and CVE-2014-7169 (Tavis Ormandy). The first vulnerability is an initially discovered bug in Bash, which leads to the execution of improper interpreter instructions, and the second is a bug in the first patch to Bash, which also contained an error and could lead to unauthorized execution of instructions.

