Shocked by the Shell

We discuss the implications of Shellshock for Unix-based operating systems.
These include both Mac and IOS, Android, and many Linux distributions.

How to trash your Bash: A how to guide

The objective for this guide is to walk you threw the necessary steps to update your version of Bash used by OS X, because you’re Mac should belong to you, not some random creepy hacker, right? You worked long and hard for that shiny knew Mac. Why should they get to use it for free?! Actually, you might be paying him or her to use it because you probably have your iTunes credits, and all of your banking information saved in various places on your Mac. Giving all that stuff away to anyone isn’t cool, right? Right!
So let’s give creepy hacker a run for his or her money, and not yours!

What You’ll Need

1. an internet connection, which you probably have if you’re viewing this page.
2. A working Apple ID.
3. At least five or six Gigs of space on your hard drive.
Ok, so I’ve got an internet connection seeing as I am reading this guide after all, I have an Apple ID, I’ve got the space, Can we get on with the fix please?
Sure we can.

What To Do

1. Open up the AppStore.
2. Search for “Xcode” and install it.
Note: Xcode is required for this Bash upgrade to work.
3. Open Xcode and agree to the terms and conditions.
Note: The terminal will give you the opportunity to do this, but I found doing it in Xcode itself was easier.
3. After you agree, Xcode will ask you to install extra components. Go ahead and let it install them. It shouldn’t take too long.
4. Once everything is installed, you can close Xcode.
5. In Finder, navigate to the “Utilities” folder.
6. Near the bottom of the list, you should find “Terminal”. Open it.

Ok, I’ve got this thing open. It’s a bunch of text and I don’t know what to do! Help!
Don’t panic, it’s not really that bad. Promise.

Time To Have Some Fun

I’ve listed these commands on separate lines to make this job easier. What job you ask? Well, all of these commands need to be copied and then pasted into Terminal one at a time.
Press enter to run the pasted commands.

1. mkdir bash-fix
2. cd bash-fix
3. curl https://opensource.apple.com/tarballs/bash/bash-92.tar.gz | tar zxf –
4. cd bash-92/bash-3.2
5. curl https://ftp.gnu.org/pub/gnu/bash/bash-3.2-patches/bash32-052 | patch -p0
6. cd ..
7. sudo xcodebuild
Note: This command will ask you for your password. Type your account password and press enter.
A bunch of text will scroll bye. It’s just Xcode doing it’s thing.

Extras

1. If you want to remove the “bash-fix” folder you made using the very first command, type the following:
cd ~
sudo rm -rf bash-fix
Press enter and type your account password if prompted.
You should now be upgraded to a version of Bash not effected by the Shellshock bug.
Finally: You might want to tell Creepy hacker the only hacking they should be doing is the type done by your lungs when you’re sick.