anti-shellshock suggestions

[David Nicholls]

There is a revised command line fix (to bash and sh version 3.2.53) at http://apple.stackexchange.com/questions/146849/how-do-i-recompile-bash-to-avoid-shellshock-the-remote-exploit-cve-2014-6271-an/146851#146851 (post by AlBlue) which now works on both vulnerabilities, if you are using the standard Mac bash and sh

DN

On 27 Sep 2014, at 12:43:58 am, Brandon Allbery <allbery.b at gmail.com<mailto:allbery.b at gmail.com>> wrote:

On Fri, Sep 26, 2014 at 10:40 AM, René J.V. <rjvbertin at gmail.com<mailto:rjvbertin at gmail.com>> wrote:
OK, my bad, I must have been daydreaming instead of seeing something about a sec update for this issue. Can't remember where I saw it either (but I do remember launching ASU on my 10.6 rig to see if I'd gotten lucky :))

I hd 2014-004 queued up on the 10.8 box, but it predates shellshock. Apple hasn't released a patch for bash that I'm aware of (and I checked yet again an hour ago).

--
brandon s allbery kf8nh                               sine nomine associates
allbery.b at gmail.com<mailto:allbery.b at gmail.com>                                  ballbery at sinenomine.net<mailto:ballbery at sinenomine.net>
unix, openafs, kerberos, infrastructure, xmonad        http://sinenomine.net<http://sinenomine.net/>
_______________________________________________
macports-users mailing list
macports-users at lists.macosforge.org<mailto:macports-users at lists.macosforge.org>
https://lists.macosforge.org/mailman/listinfo/macports-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.macosforge.org/pipermail/macports-users/attachments/20140926/75f378a7/attachment.html>