3

As described here, I'm technically vulnerable to the "Shellshock" bug in my shell. I'm running Mavericks.

Apple has released an update to bash that addresses this issue. As per the example test script in the linked question, I'm currently still vulnerable and have no available updates showing up in the App Store.

Has Apple made any announcement, or have any public policy on whether this update will eventually be made available for software update via the App Store?

Improve this question
13
  • No - users have to opt in to all updates on OS X. Just run the normal software update process from the Apple Menu and accept the security related fixes. You might have updates notify you periodically (weekly is the default interval to check) but the patches aren't applied, just possibly downloaded and ready to apply.
    – bmike ♦
    Oct 6, 2014 at 15:44
  • The bash update in question is not currently available via the "Software Update" option in the Apple menu (which launches the App Store's 'Updates' tab). This question is about whether it eventually will become available through that channel, rather than about how to apply regular updates.
    – Adam S
    Oct 6, 2014 at 15:52
  • Sure, but a security update related to "developer tools" (used loosely) isn't a unique situation; there's likely past situations from which we can draw comparisons. There may be a technical reason, or there may be an official stance from Apple that I'm unaware of - personally I'm baffled as to why this isn't simply being distributed to all users as part of an OS update.
    – Adam S
    Oct 6, 2014 at 16:25
  • 1
    Looking at your question, there really are two questions. 1) Is Apple going to release a patch? - most likely off topic for this site. 2) What Updates have I missed? Needs an edit to explain why you feel you have missed updates and/or editing to remove the other question in the post.
    – bmike ♦
    Oct 6, 2014 at 17:01
  • 1
    @AdamS "only able to find speculation " is the point we can openly speculate - the only answer is one from Apple. Us adding to speculation does not help
    – mmmmmm
    Oct 6, 2014 at 18:45

2 Answers 2

Reset to default
2

Will this update (eventually) be applied automatically via the App Store, or do I have to apply it manually?

As I explain in my answer on the question you link to, Apple has released patches you can download & run yourself. You do not have too compile from source or be deeply technically capable to run them. Just download the one appropriate for your machine, run the installer & that’s it:

And while not directly available via the software update system provided in the App Store, running this patch is one of the simplest Mac OS X patches I have ever run. It takes about a minute of your time, an admin password & there is no need to reboot.

UPDATE: Look, I just saw a pig fly!

Note: Security Update 2014-005 includes the security content of OS X bash Update 1.0

Improve this answer
1
  • This was indeed extremely trivial to apply manually (and this answer is no doubt useful to anyone reading this), however this doesn't answer the question of whether this patch will come through the App Store or not.
    – Adam S
    Oct 8, 2014 at 12:57
-1

There is currently no information on whether this update will appear via the built-in App Store update mechanism - as described by patrix in the comments on the original question:

"Nobody knows because Apple doesn't publish any update/patch strategies, and any other possible answer will not be backed up by facts".

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .