There is a revised command line fix (to bash and sh version 3.2.53) at 
http://apple.stackexchange.com/questions/146849/how-do-i-recompile-bash-to-avoid-shellshock-the-remote-exploit-cve-2014-6271-an/146851#146851
 (post by AlBlue) which now works on both vulnerabilities, if you are using the 
standard Mac bash and sh

DN

On 27 Sep 2014, at 12:43:58 am, Brandon Allbery 
<[email protected]<mailto:[email protected]>> wrote:

On Fri, Sep 26, 2014 at 10:40 AM, René J.V. 
<[email protected]<mailto:[email protected]>> wrote:
OK, my bad, I must have been daydreaming instead of seeing something about a 
sec update for this issue. Can't remember where I saw it either (but I do 
remember launching ASU on my 10.6 rig to see if I'd gotten lucky :))

I hd 2014-004 queued up on the 10.8 box, but it predates shellshock. Apple 
hasn't released a patch for bash that I'm aware of (and I checked yet again an 
hour ago).

--
brandon s allbery kf8nh                               sine nomine associates
[email protected]<mailto:[email protected]>                                 
 [email protected]<mailto:[email protected]>
unix, openafs, kerberos, infrastructure, xmonad        
http://sinenomine.net<http://sinenomine.net/>
_______________________________________________
macports-users mailing list
[email protected]<mailto:[email protected]>
https://lists.macosforge.org/mailman/listinfo/macports-users

_______________________________________________
macports-users mailing list
[email protected]
https://lists.macosforge.org/mailman/listinfo/macports-users

Reply via email to