Apple fixed Shellshock vulnerability in OS X / ESET NOD32 Blog

Shellshock · os x

esetnod32 September 30, 2014 at 13:13

Apple fixed Shellshock vulnerability in OS X

The company released the APPLE-SA-2014-09-29-1 update, which fixes the recently discovered Shellshock vulnerability for OS X versions of Lion , Mountain Lion, and Mavericks . This update delivers a new version of the Bash v.3.2.53 interpreter and fixes two Shellshock-related vulnerabilities: CVE-2014-6271 (Stephane Chazelas) and CVE-2014-7169 (Tavis Ormandy). The first vulnerability is an initially discovered bug in Bash, which leads to the execution of improper interpreter instructions, and the second is a bug in the first patch to Bash, which also contained an error and could lead to unauthorized execution of instructions.

Tags:

Tags

#Shellshock #os x

Read Next

AltSendme 0.3.5: P2P file exchange with QUIC

AltSendme 0.3.5: P2P file exchange with QUIC

Explore the AltSendme 0.3.5 update: end-to-end QUIC/TLS encryption, Android support, NAT bypass. Ideal for developers. Download and test P2P file transfer without clouds.

Soil Sensor Data Compensation on ESP32: Scientific Models and Agro-Recommendations

Soil Sensor Data Compensation on ESP32: Scientific Models and Agro-Recommendations

How to Implement Scientific Compensation of IoT Soil Sensor Data on ESP32. Rhoades, Nernst, Delgado Models, Integration with Home Assistant, MQTT. Developer's Guide.

Collider bias in data science: simulation of the effect

Collider bias in data science: simulation of the effect

Learn how collider filtering creates false correlations in data. Python simulations of uniform and normal distributions. Avoid errors in analysis — read and apply in practice.

Technical debt: managerial credit in IT

Technical debt: managerial credit in IT

Break down the mechanism of technical debt as business credit. Metrics, consequences for the team, reduction strategies. For IT managers and developers — read and implement.

Structured JSON Logs: A Guide for Developers

Structured JSON Logs: A Guide for Developers

Practical guide to implementing effective logging in distributed systems. Learn about MDC, entrypoints and error/warning separation.

Wikipedia Ban on AI for Articles: New Rules

Wikipedia Ban on AI for Articles: New Rules

Wikipedia has banned language models for generating articles due to hallucinations and burden on moderators. Allowed editing and translation. Study the updated policy for editors.

AI agents vs developers: 5 differences

AI agents vs developers: 5 differences

Difference between AI agents and programmers in memory, architecture, errors. How to adapt the process: context, specifications, checks. For middle/senior dev.

AI Bypasses ATS Filters in Hiring

AI Bypasses ATS Filters in Hiring

Learn how AI tools automate job search and bypass ATS. Risks, strategies, and data requirements for middle/senior specialists. Increase your chances of getting an interview.

RDP scanning AS213438: surges and risks

RDP scanning AS213438: surges and risks

Analysis of RDP traffic concentration in AS213438: 67% of global scanning from the Netherlands. Causes, consequences, and protection measures for business. Learn how to secure networks.

Plugin Phone Validator for WPForms: protection from fake numbers

Plugin Phone Validator for WPForms: protection from fake numbers

Set up phone number validation in WPForms: length, repetitions, blacklist, throttling. Install the plugin and reduce junk leads from paid traffic. Free on WordPress.org.