GNU bash ShellShock bug and how to fix it on OS X

Update: A new bash patch is released as bash-4.3.26. This article is updated to include the new patch.

Recently another UNIX bug broke out: ShellShock bug in GNU bash, the most commonly-used UNIX shell. It allowed arbitrary code execution. which is bad.

Test code, if you want to check:

env "() { ;:}; echo gah" bash -c "echo test"

If you see both gah and test, your system is vulnerable! Read on!

Continue reading GNU bash ShellShock bug and how to fix it on OS X


I am a OS X user, and I am also a Linux user. OS X packs FreeBSD user land, Linux packs GNU user land. Somehow I managed to like OS X, but also GNU user land.

That is why I am always trying to replace my OS X FreeBSD user land with GNU equivalents. That will involve some heavy-duty compiling and checking. Tiring, but rewarding as my scripts can work on both systems.

One missing piece I tried to port but never succeed is Ubuntu’s bash-completion package which is makes bash super easy to use.