Anyone try the OSX Bash Update?

Macintosh software/hardware discussion and troubleshooting

Moderator: James Steele

Post Reply
User avatar
cuttime
Posts: 4291
Joined: Sun May 15, 2005 10:01 pm
Primary DAW OS: MacOS

Anyone try the OSX Bash Update?

Post by cuttime »

I'm gun shy lately, and I don't understand why Apple hasn't pushed this security update through the App Store.
828x MacOS 13.6.5 M1 Studio Max 1TB 64G DP11.31
User avatar
billf
Posts: 3662
Joined: Sat Jan 22, 2005 10:01 pm
Primary DAW OS: MacOS
Location: Home

Re: Anyone try the OSX Bash Update?

Post by billf »

I'm wondering about that too.
MacPro5,1 2012, six core 2 x 3.06, 10.12.5, Digital Performer 9.13, 40 gb ram, 828mkIII, 2408 mkII, MTP AV, Logic Pro X 10.3.1, Studio One v 3.2, Pro Tools 12.7.1
User avatar
rnappi
Posts: 118
Joined: Tue Jan 16, 2007 10:22 am
Primary DAW OS: MacOS
Location: NY,NY

Re: Anyone try the OSX Bash Update?

Post by rnappi »

I installed it and haven't had any problems. Here's what apple has to say about security issues:http://support.apple.com/kb/HT1222

rich
Last edited by rnappi on Wed Oct 01, 2014 8:37 pm, edited 1 time in total.
2012 Mac Pro 3.46 Ghz Westmere 12 Core_96G Ram_OSX 10.12.6_DP 9.5
User avatar
bayswater
Posts: 11923
Joined: Fri Feb 16, 2007 9:06 pm
Primary DAW OS: MacOS
Location: Vancouver

Re: Anyone try the OSX Bash Update?

Post by bayswater »

I was told this update is not required unless you've set up your Mac to run "advanced unix functions", whatever those are.
2018 Mini i7 32G 10.14.6, DP 11.3, Mixbus 9, Logic 10.5, Scarlett 18i8
User avatar
rnappi
Posts: 118
Joined: Tue Jan 16, 2007 10:22 am
Primary DAW OS: MacOS
Location: NY,NY

Re: Anyone try the OSX Bash Update?

Post by rnappi »

I won't say whether you should or shouldn't install the update, but here's a test you can run in Terminal to see if you're potentially vulnerable:http://www.intego.com/mac-security-blog ... wLgPWBM%3D

Mine came back vulnerable, so I installed the patch and haven't had any problems.

rich
2012 Mac Pro 3.46 Ghz Westmere 12 Core_96G Ram_OSX 10.12.6_DP 9.5
User avatar
bayswater
Posts: 11923
Joined: Fri Feb 16, 2007 9:06 pm
Primary DAW OS: MacOS
Location: Vancouver

Re: Anyone try the OSX Bash Update?

Post by bayswater »

I bet that test simply checks whether the update has been applied. But it's quick and easy to do, so there is no reason not to apply the fix. The downside is you have to be at 10.9.5. Apple has not provided an update for earlier releases of 10.9.
2018 Mini i7 32G 10.14.6, DP 11.3, Mixbus 9, Logic 10.5, Scarlett 18i8
User avatar
rnappi
Posts: 118
Joined: Tue Jan 16, 2007 10:22 am
Primary DAW OS: MacOS
Location: NY,NY

Re: Anyone try the OSX Bash Update?

Post by rnappi »

From the linked article:

"...if your Mac is “vulnerable,” all this means is that your default shell is Bash. The only way for infections to occur is by exposing this vulnerability on a Mac."

rich
2012 Mac Pro 3.46 Ghz Westmere 12 Core_96G Ram_OSX 10.12.6_DP 9.5
User avatar
cuttime
Posts: 4291
Joined: Sun May 15, 2005 10:01 pm
Primary DAW OS: MacOS

Re: Anyone try the OSX Bash Update?

Post by cuttime »

Thanks for chiming in. Could Apple have made this process any more opaque?
828x MacOS 13.6.5 M1 Studio Max 1TB 64G DP11.31
User avatar
bayswater
Posts: 11923
Joined: Fri Feb 16, 2007 9:06 pm
Primary DAW OS: MacOS
Location: Vancouver

Re: Anyone try the OSX Bash Update?

Post by bayswater »

I expect they kept it low key because the vulnerability apparently there when you run web services off your Mac. You'd have to assume that's a pretty small proportion of their base.
2018 Mini i7 32G 10.14.6, DP 11.3, Mixbus 9, Logic 10.5, Scarlett 18i8
User avatar
James Steele
Site Administrator
Posts: 21067
Joined: Fri Oct 15, 2004 10:01 pm
Primary DAW OS: MacOS
Location: San Diego, CA - U.S.A.
Contact:

Re: Anyone try the OSX Bash Update?

Post by James Steele »

Yeah... I read what has to happen for the vulnerability to exploited and not many machines would be at risk. Still I just installed it on the Mac I'm on now (MacPro 1,1 running Lion) and it was painless and surprisingly did not require a reboot, which I didn't expect. I'll probably do it on all my Macs just for the heck of it.
JamesSteeleProject.com | Facebook | Instagram | Twitter

Mac Studio M1 Max, 64GB/2TB, MacOS 14.4.1 Sonoma, DP 11.31, MOTU 828es, MOTU 24Ai, MOTU MIDI Express XT, UAD-2 TB3 Satellite OCTO, Console 1 Mk2, Avid S3, NI Komplete Kontrol S88 Mk2, Red Type B, Millennia HV-3C, Warm Audio WA-2A, AudioScape 76F, Dean guitars, Marshall amps, etc., etc.!
User avatar
billf
Posts: 3662
Joined: Sat Jan 22, 2005 10:01 pm
Primary DAW OS: MacOS
Location: Home

Re: Anyone try the OSX Bash Update?

Post by billf »

Here are the updater links for each OSX version:

OS X bash Update 1.0 may be obtained from the following at Apple:

http://support.apple.com/kb/DL1767 – OS X Lion
http://support.apple.com/kb/DL1768 – OS X Mountain Lion
http://support.apple.com/kb/DL1769 – OS X Mavericks
MacPro5,1 2012, six core 2 x 3.06, 10.12.5, Digital Performer 9.13, 40 gb ram, 828mkIII, 2408 mkII, MTP AV, Logic Pro X 10.3.1, Studio One v 3.2, Pro Tools 12.7.1
Post Reply