Apple fixed Shellshock vulnerability in OS X / ESET NOD32 Blog

Shellshock · os x

esetnod32 September 30, 2014 at 13:13

Apple fixed Shellshock vulnerability in OS X

The company released the APPLE-SA-2014-09-29-1 update, which fixes the recently discovered Shellshock vulnerability for OS X versions of Lion , Mountain Lion, and Mavericks . This update delivers a new version of the Bash v.3.2.53 interpreter and fixes two Shellshock-related vulnerabilities: CVE-2014-6271 (Stephane Chazelas) and CVE-2014-7169 (Tavis Ormandy). The first vulnerability is an initially discovered bug in Bash, which leads to the execution of improper interpreter instructions, and the second is a bug in the first patch to Bash, which also contained an error and could lead to unauthorized execution of instructions.

Tags:

Tags

#Shellshock #os x

Read Next

AI agents for automation: 7 scenarios

AI agents for automation: 7 scenarios

Learn to automate receipt processing, reports, trip planning, and QBR with AI agents. Ready prompts for Claude, ChatGPT, Gemini. Save hours on routine — implement today.

Account blocking VeraCrypt WireGuard Microsoft

Account blocking VeraCrypt WireGuard Microsoft

Microsoft has blocked driver signing for VeraCrypt and WireGuard. SecureBoot risks, 2011 certificate revocation. What to do for Windows developers and users — read the analysis.

Frontend as a REST Server: Architecture and Patterns

Frontend as a REST Server: Architecture and Patterns

We analyze why frontend is architecturally equal to backend. We apply controllers, DTO and services for clean code. Read the guide.

Claude and Codex Debates in VS Code for the Best Solutions

Claude and Codex Debates in VS Code for the Best Solutions

Integration of Claude Code with Codex: three protocols for AI model debates. Selection of alternatives, strategy analysis, idea generation. Installation and examples for developers. Try in VS Code.

Notation for SQL conditions in JSON strings

Notation for SQL conditions in JSON strings

Compact string notation for generating SQL expressions from JSON. Support for sets, intervals, MIN/MAX. Regular validation and examples for developers. Study and implement in preprocessor.

Foxconn launched PEARL satellites for future communications

Foxconn launched PEARL satellites for future communications

Foxconn has put PEARL-1A and 1B satellites with Ka-band into orbit. Learn how the iPhone assembler is transforming into a space communications operator. Details inside!

Evolution of AI over 70 years: from theory to physical embodiment in robots

Evolution of AI over 70 years: from theory to physical embodiment in robots

70 years of AI evolution: from the Dartmouth Conference to multimodal models and physical AI. Who wins in the new era — analysis of trends, risks, and the market. Find out now.

Free NVIDIA API: 100+ models for developers

Free NVIDIA API: 100+ models for developers

NVIDIA provides free API access to 100+ neural network models. Learn how to connect, tariff limitations, and usage scenarios. Practical guide for developers.

Bug in imageproc: API change in image-rs for RGBA | Analysis

Bug in imageproc: API change in image-rs for RGBA | Analysis

Why did fixing the bug in imageproc require changing the API in image-rs? Technical analysis of the error when rendering text on RGBA images. Solution for Rust developers.

Toto ramps up production of ceramic components for AI chips: stock rise

Toto ramps up production of ceramic components for AI chips: stock rise

Japanese Toto, known for plumbing, expands production of ceramic parts for AI chips. Shares surged 18% amid investment boom. Learn how the company is becoming a key player in AI infrastructure.