Skip to content

Instantly share code, notes, and snippets.

@vivekdurai
Last active August 29, 2015 14:06
Show Gist options
  • Save vivekdurai/65491998f2b5e8edd4de to your computer and use it in GitHub Desktop.
Save vivekdurai/65491998f2b5e8edd4de to your computer and use it in GitHub Desktop.
Steps to patch OS X for 'shellshock' bash vulnerability
As posted on http://apple.stackexchange.com/questions/146849/how-do-i-recompile-bash-to-avoid-the-remote-exploit-cve-2014-6271-and-cve-2014-7/146851#146851 by http://apple.stackexchange.com/users/1573/alblue
$ mkdir bash-fix
$ cd bash-fix
$ curl https://opensource.apple.com/tarballs/bash/bash-92.tar.gz | tar zxf -
$ cd bash-92/bash-3.2
$ curl https://ftp.gnu.org/pub/gnu/bash/bash-3.2-patches/bash32-052 | patch -p0
$ cd ..
$ xcodebuild
$ sudo cp /bin/bash /bin/bash.old
$ sudo cp /bin/sh /bin/sh.old
$ build/Release/bash --version # GNU bash, version 3.2.52(1)-release
$ build/Release/sh --version # GNU bash, version 3.2.52(1)-release
$ sudo cp build/Release/bash /bin
$ sudo cp build/Release/sh /bin
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment