Potential computer bug warning

[Mrs Mungo]

http://www.mirror.co.uk/news/technology-science/technology/shellshock-bug-your-computer-one-4321560

[Catwoman]

Thank you for posting about this -- I wouldn't have heard about it if you hadn't.

[Guest]

It's patched.

 

http://www.theguardian.com/technology/2014/sep/26/bash-bug-shellshock-richard-stallman?CMP=twt_gu

 

 

http://www.macissues.com/2014/09/25/bash-shell-shock-vulnerability-affect-unix-based-systems-including-os-x/

 

The command is the same on *nix:

 

env x='() { :;}; echo vulnerable' bash -c 'echo this is a test'

 

If you get the below then shellshock bug is patched.

 

##
bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'

##

 

 

[StaceyinLA]

This all looks like a foreign language to me. What do I need to do on my iMac to make sure it's ok?

[Cindy in FL.]

Thanks so much for posting this. We don't usually keep on top of updates for our Macs like we should. I'll be watching for them now, though!

 

ETA: I see that Ethel has come through with more info!

[Guest]

Open a terminal window (Command Prompt: http://www.wikihow.com/Get-to-the-Command-Line-on-a-Mac) and type in the following:

 

env x='() { :;}; echo vulnerable' bash -c 'echo this is a test'

 

and hit enter. You should see the following:

 

##
bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test
##

 

if you are patched. If not, you will see "vulnerable"

 

This is copied and pasted off the Trisquel forums, so it may be slightly different for a Mac.

 

There's more info here:

 

https://www.fsf.org/news/free-software-foundation-statement-on-the-gnu-bash-shellshock-vulnerability

 

and a link to where you can download the patch if your OS hasn't already released it and you're up for something a bit more complicated than sudo apt-get update sudo apt-get upgrade.