Shellshock

Tiuno said:

Hi guys, just sharing about the shellsock bug. I've been wondering when is Appel going to release a fix for that bug. In short for the peolple that don't know about that critical bug, it's a problem within the Bash interpreter program. What happens is that the interpreter still parses past the end of a function when declaring a variable in the environment, allowing to insert malicious code. It is important to notice that many servers run bash in the background, for instance git. It's serious security flaw and I don't understand, why Apple hasn't fixed it's distribution of bash, when they are so focused on our security! I'm interested to read your thoughts about it.

Click to expand...