• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag
 

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: OFF TOPIC: Shell Shock for my system MacOS 10.6.8 bash version
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: OFF TOPIC: Shell Shock for my system MacOS 10.6.8 bash version


  • Subject: Re: OFF TOPIC: Shell Shock for my system MacOS 10.6.8 bash version
  • From: Alex Zavatone <email@hidden>
  • Date: Thu, 02 Oct 2014 13:08:43 -0400

Thanks. I have 5 machines that run 10.6.8.  This is appreciated.

Sent from my iPod

On Oct 2, 2014, at 11:33 AM, Jim Weisbin <email@hidden> wrote:

CYB <email@hidden> wrote:

is there a patch against ³Shell Shock² for my system MacOS 10.6.8 bash
version 3.2.48(1)-release (x86_64-apple-darwin10.0)

Have XCode installed and run it at least once to agree to the license terms. Make sure you have backup copies of /bin/bash and /bin/sh. Open terminal and cd to you home folder. Do NOT su to root. Then make this into a script and run it:

#!/bin/bash
mkdir bash-fix
cd bash-fix
curl -k https://opensource.apple.com/tarballs/bash/bash-92.tar.gz | tar zxf -
cd bash-92/bash-3.2
curl -k https://ftp.gnu.org/pub/gnu/bash/bash-3.2-patches/bash32-052 | patch -p0    
curl -k https://ftp.gnu.org/pub/gnu/bash/bash-3.2-patches/bash32-053 | patch -p0  
[ "$ADD_IMPORT_FUNCTIONS_PATCH" == "YES" ] && curl http://alblue.bandlem.com/import_functions.patch | patch -p0
[ "$ADD_IMPORT_FUNCTIONS_PATCH" == "YES" ] || curl https://ftp.gnu.org/pub/gnu/bash/bash-3.2-patches/bash32-054 | patch -p0
[ "$ADD_IMPORT_FUNCTIONS_PATCH" == "YES" ] || curl https://ftp.gnu.org/pub/gnu/bash/bash-3.2-patches/bash32-055 | patch -p0
cd ..
# Note: DO NOT ADD SUDO TO XCODEBUILD HERE
xcodebuild
build/Release/bash --version # GNU bash, version 3.2.55(1)-release
build/Release/sh --version   # GNU bash, version 3.2.55(1)-release
sudo cp /bin/bash /bin/bash.old
sudo cp /bin/sh /bin/sh.old
sudo cp build/Release/bash /bin
sudo cp build/Release/sh /bin

Bash will be updated to version 3.2.55(1), which, as of today anyway, removes all known vulnerabilities (Apple’s most recent patch does not).

Jim Weisbin | C.T.O. | human | 138 Fifth Avenue | 3rd Floor | New York, NY | 10011 |  (212) 352-0211 |  (917) 375-2272 | Los Angeles Office | 2046 Broadway | Santa Monica, CA | 90404 |  (310) 264-0211 telephone | www.humanworldwide.com

Click here to view our online reel

Do not post admin requests to the list. They will be ignored. AppleScript-Users mailing list (email@hidden) Help/Unsubscribe/Update your Subscription: Archives: http://lists.apple.com/archives/applescript-users This email sent to email@hidden
References: 
 >Re: OFF TOPIC: Shell Shock for my system MacOS 10.6.8 bash version (From: Jim Weisbin <email@hidden>)

  • Prev by Date: Re: Option key down in Yosemite
  • Next by Date: Re: Option key down in Yosemite
  • Previous by thread: Re: OFF TOPIC: Shell Shock for my system MacOS 10.6.8 bash version
  • Next by thread: Re: OFF TOPIC: Shell Shock for my system MacOS 10.6.8 bash version
  • Index(es):
    • Date
    • Thread