Yesterday, Apple released security updates that address two of the "Shellshock" bash vulnerabilities: CVE-2014-6271 and CVE-2014-7169. At the time of writing, the updates are not available using Software Update on OS X. Instead, users should download the package directly from Apple's web site to install it. Updates are available for 10.7 (Lion), 10.8 (Mountain Lion) and 10.9 (Mavericks).
Amidst the flurry of activity and interest around Shellshock over the last week, several additional bash vulnerabilities have come to light.
more here..........https://community.rapid7.com/community/infosec/blog/2014/09/30/apple-releases-patch-for-shellshock-may-still-be-vulnerable
Amidst the flurry of activity and interest around Shellshock over the last week, several additional bash vulnerabilities have come to light.
more here..........https://community.rapid7.com/community/infosec/blog/2014/09/30/apple-releases-patch-for-shellshock-may-still-be-vulnerable