Shellshock: Apple assures OS X users over Bash Bug risks
Apple says the "vast majority" of OS X users shouldn't be affected

Apple has moved to assure users of its Mac OS X operating system about the security of their machines, in the face of the recently discovered Shellshock (Bash) bug.
As reported by IT Pro yesterday, the vulnerability affects Bash command-line shell used to power Linux and Unix-based operating systems, which include OS X.
This has the potential to be seized upon by cyber attackers to remotely execute arbitrary code on an affected system and, in turn, take control of a person's machine.
Furthermore, it's estimated that around 60 per cent of the world's Apache-based websites also rely on Bash to run background applications, potentially putting them at risk too.
For this reason, Shellshock or the Bash Bug, as some have dubbed it has been dubbed "bigger than Heartbleed", in reference to the OpenSSL flaw that wreaked havoc on the web earlier this year.
However, Apple has been quick to tell users of its OS X desktop operating system that there is no need to panic, as there is a good chance the flaw will not affect them.
Speaking to Apple tech site iMore, an Apple spokesperson said: "The vast majority of OS X users are not at risk to recently reported Bash vulnerabilities.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"Bash, a Unix command shell and language included in OS X, has a weakness that could allow unauthorised users to remotely gain control of vulnerable systems.
"With OS X, systems are safe by default and not exposed to remote exploits of Bash unless users configure advanced Unix services. We are working to quickly provide a software update for our advanced Unix users."
-
Should AI PCs be part of your next hardware refresh?
AI PCs are fast becoming a business staple and a surefire way to future-proof your business
By Bobby Hellard
-
Westcon-Comstor and Vectra AI launch brace of new channel initiatives
News Westcon-Comstor and Vectra AI have announced the launch of two new channel growth initiatives focused on the managed security service provider (MSSP) space and AWS Marketplace.
By Daniel Todd
-
Tiny11 review: Windows 11 with only 2GB of RAM
Review A version of Windows 11 for older machines that don't meet the full requirements
By Nik Rawlinson
-
Red Hat Enterprise Linux becomes foundational operating system for Cohesity Data Cloud
News New strategic partnership between Red Hat and Cohesity aims to drive innovation in the data security and management space
By Daniel Todd
-
Ubuntu shifts to four-week update cycle
News Critical fixes will also come every two weeks, mitigating the issues involved with releasing prompt patches on the old three-week cadence
By Richard Speed
-
AlmaLinux follows Oracle in ditching RHEL compatibility
News Application binary compatibility is now the aim with 1:1 now dropped
By Richard Speed
-
How big is the Windows 10 cliff-edge?
ITPro Network With some comparing the upcoming Windows 10 end of life to Windows XP, we ask members of the ITPro Network for their insight
By Jane McCallion
-
Everything you need to know about the latest Windows 11 updates - from bug fixes to brand-new features
News Two new cumulative updates are on the way and will be installed automatically on Windows 10 and Windows 11 machines
By Rory Bathgate
-
How to download a Windows 11 ISO file and perform a clean install
Tutorial Use a Windows 11 ISO to install the operating system afresh
By John Loeppky
-
We could all benefit from better Windows and macOS accessibility features
Opinion Today’s accessibility features can help you work through a nasty injury, but there’s still plenty of room for improvement
By Barry Collins