Shellshock: Apple assures OS X users over Bash Bug risks
Apple says the "vast majority" of OS X users shouldn't be affected
Apple has moved to assure users of its Mac OS X operating system about the security of their machines, in the face of the recently discovered Shellshock (Bash) bug.
As reported by IT Pro yesterday, the vulnerability affects Bash command-line shell used to power Linux and Unix-based operating systems, which include OS X.
This has the potential to be seized upon by cyber attackers to remotely execute arbitrary code on an affected system and, in turn, take control of a person's machine.
Furthermore, it's estimated that around 60 per cent of the world's Apache-based websites also rely on Bash to run background applications, potentially putting them at risk too.
For this reason, Shellshock or the Bash Bug, as some have dubbed it has been dubbed "bigger than Heartbleed", in reference to the OpenSSL flaw that wreaked havoc on the web earlier this year.
However, Apple has been quick to tell users of its OS X desktop operating system that there is no need to panic, as there is a good chance the flaw will not affect them.
Speaking to Apple tech site iMore, an Apple spokesperson said: "The vast majority of OS X users are not at risk to recently reported Bash vulnerabilities.
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.
"Bash, a Unix command shell and language included in OS X, has a weakness that could allow unauthorised users to remotely gain control of vulnerable systems.
"With OS X, systems are safe by default and not exposed to remote exploits of Bash unless users configure advanced Unix services. We are working to quickly provide a software update for our advanced Unix users."
Caroline Donnelly was the news and analysis editor of IT Pro. Previously, she worked as a reporter at several B2B publications, including UK channel magazine CRN, and as features writer for local weekly newspaper, The Slough and Windsor Observer. She studied Medical Biochemistry at the University of Leicester and completed a Postgraduate Diploma in Magazine Journalism at PMA Training in 2006.
-
The OpenAI and Anthropic containment breaches are a bit spooky, but also quite sillyOpinion An AI leaving notes to future versions of itself is pure sci-fi; forgetting to lock down an environment is prosaic
-
Bringing data to the heart of AISponsored AI is changing our approach to data, find out how HPE Alletra Storage can help your business
-
Why is Windows 11 so disliked by programmers – and can Microsoft do anything to change things?Windows isn't the most useful OS in the eyes of developers, with programmers preferring macOS or Linux. But is its bad reputation uncalled for?
-
AI is coming to Ubuntu: Canonical exec teases future AI features and agentic workflow capabilities for version 26.10 — but on a ‘strictly opt-in basis’News A range of new AI features are coming to Ubuntu over the next year, according to maintainers, but only providing they’re of “sufficient maturity and quality”.
-
Windows 10 extended support costs could top $7 billionNews Enterprises sticking with Windows 10 after the October deadline face huge costs
-
Tiny11 review: Windows 11 with only 2GB of RAMReview A version of Windows 11 for older machines that don't meet the full requirements
-
Red Hat Enterprise Linux becomes foundational operating system for Cohesity Data CloudNews New strategic partnership between Red Hat and Cohesity aims to drive innovation in the data security and management space
-
Ubuntu shifts to four-week update cycleNews Critical fixes will also come every two weeks, mitigating the issues involved with releasing prompt patches on the old three-week cadence
-
AlmaLinux follows Oracle in ditching RHEL compatibilityNews Application binary compatibility is now the aim with 1:1 now dropped
-
How big is the Windows 10 cliff-edge?ITPro Network With some comparing the upcoming Windows 10 end of life to Windows XP, we ask members of the ITPro Network for their insight