Skip to content

Instantly share code, notes, and snippets.

@mlanett
Created September 29, 2014 18:43
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mlanett/da24bc9b513a7286d78f to your computer and use it in GitHub Desktop.
Save mlanett/da24bc9b513a7286d78f to your computer and use it in GitHub Desktop.
Patch Bash to avoid Shellshock exploits (Mac OS X)
cd /tmp
mkdir bash-fix
cd bash-fix
curl https://opensource.apple.com/tarballs/bash/bash-92.tar.gz | tar zxf -
cd bash-92/bash-3.2
curl https://ftp.gnu.org/pub/gnu/bash/bash-3.2-patches/bash32-052 | patch -p0
curl https://ftp.gnu.org/pub/gnu/bash/bash-3.2-patches/bash32-053 | patch -p0
cd ..
sudo xcodebuild
sudo cp /bin/bash /bin/bash.old
sudo cp /bin/sh /bin/sh.old
build/Release/bash --version # GNU bash, version 3.2.53(1)-release
build/Release/sh --version # GNU bash, version 3.2.53(1)-release
sudo cp build/Release/bash /bin
sudo cp build/Release/sh /bin
sudo chmod 644 /bin/bash.old /bin/sh.old
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment