Apple Releases Patches for Shellshock Bug
Summary: Apple released updates to protect Mac OS X systems from the "Shellshock" bug, a pervasive vulnerability already being exploited in active attacks, with patches available via Software Update or download links for OS X Mavericks, Mountain Lion, and Lion. After installing, users can verify the fix by running "bash --version" in Terminal, which should report GNU bash version 3.2.53(1)-release on each of the three OS versions.
Bottom line: The flaw was already being exploited in active attacks when the patches shipped, and Apple had not released a patch for users still on OS X 10.6.8 - they were told to upgrade to Mavericks first, leaving anyone who could not or did not upgrade exposed.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026