Suggested defense against the new "Bash bug"?

I am looking for suggestions on how to protect my Mac OS X Server from the new "Bash bug" that has just been announced today. The bug affects Mac OS X, Linux and Unix.
I run a simple web server, nothing fancy. Only HTML, PHP and MySQL. The only open ports are TCP port 80 for web hosting and 3306 or MySQL access.
Any suggestions, advise, insights, et cetera is appreciated!
Thanks!

Download the patch here: https://ftp.gnu.org/pub/gnu/bash/bash-3.2-patches/

Similar Messages

Is Apple going to release a security update for Snow Leopard to patch the new 'bash' bug?

What are the chances we will see Apple release a security update to patch this bash bug vulnerability? I really love snow leopard and don't want to update. At the same time, I don't want my computer to be vulnerable! Apple is still selling snow leopard, so are they still maintaining it?

STWriter wrote:
OSx 10.6.8 IS INFECTED TOO -- news says ALL for about 25 YEARS !
I posted a site link -- check the thread.
10.6 does have the bash bug (I confirmed that a few replies back in this thread, and I mentioned the 25 years in another reply to this thread). But that is NOT an infection. Bash did not catch it. The bug was not put there on purpose. And the bug itself does not actively do anything. It is a flaw that can allow a web server using server side scripts written in the bash shell scripting language, or a server side script that invokes bash. Or a user that allows anonymous remote ssh logins. Or has enabled the CUPS web management interface.
All of which was said before in this thread. Along with why it is most likely not a problem for the typical Mac consumer.
This is a serious problem for many web servers. And there are instructions for patching bash (see above).
The typical Mac user does not do the things that put them at risk. And if they know how to set their Mac up to put themselves at risk, they are knowledgable enough to follow the patching instructions.

As good will gesture, we can help you with the upgrade for PSE 13. We would request you to place the order for Adobe Photoshop Elements 13 as an upgrade and then we will provide you the full version serial number for the same product against the new upgra

I RECIVED AN EMAIL FROM ADOBE AS : As good will gesture, we can help you with the upgrade for PSE 13. We would request you to place the order for Adobe Photoshop Elements 13 as an upgrade and then we will provide you the full version serial number for the same product against the new upgrade order" IS THIS UPGRADE FREE AND WHAT SHOULD I DO, HOW CAN I HAVE THIS UPGRADE?

Compare with on-line stores. The full version is often cheaper than Adobe's upgrade price.
See this example from Amazon, but check pricing in your own region.
http://www.amazon.com/gp/product/B00N4OLCRO/ref=s9_simh_gw_p65_d4_i2?pf_rd_m=ATVPDKIKX0DER &pf_rd_s=desktop-1&pf_rd_r=0F1GED9546928YP3PHC0&pf_rd_t=36701&pf_rd_p=1970559082&pf_rd_i=d esktop

Cannot run version 14.2.0.301 of the product against the newer version 14.2.1.0000 of the repository.

Hello SCN
I am new in Data Services and i have installed the BODS 4.1 SP2 Patch 4 the latest one.
When i am executing any Batch JOB it is showing following error;
later i investigate the issue and found this:
It might be due to different versions of Designer and JOB server.
How to resolve this issue?
please Help.
Regards
Navneet Nandan Jha

Hi Navneet,
As per my understanding from the error, you have repository older version and using that repository with newer version.
you should upgrade these repository.
To upgrade the repository you can go to repository manager and provide required details and click on Upgrade Button.
Please let me know if this solution worked for you.
Thanks & Regards,
Shiva Sahu

Is There A Definitive Way To Solve The New Firmware Bug W/Out Restoring

Without Glitches?

You can use "IPod Wizard" (for Windows; I don't know if it exists for MAC OS too; search by google) to patch the version 1.1. After this you can install the version 1.0 from CD without restoring anything.
Powerbook G4 500 MHz Mac OS 9.2.x Toshiba P20

Does the new Macbook Pro 15" (late 2013) supports 4K via Thunderbolt/Displayport?

I understand that the new Macbook Pro 15" (late 2013 with Nvidia) supports 4K screen resolutions via HDMI at low hertz. But does it support 4K via Thunderbolt/Displayport? I read on Intel's web that the NVIDIA GeForce GT 750M with 2GB memory in theory can support it. Would be important as a range of new 4K 32" monitors will come out over the next year. Would be great for photo, video editing etc.

I also am very confused by this because per apple's support page it only supports 4K via HDMI at 30Hz but SHOULD support 60Hz via a mini display port 1.2 specification built into thunderbolt 2.
However, I think it does include 60Hz support (although not mentioned on apple's website). My evidence of this is that on the ifixit teardown they found a an Intel DSL 5520 Thunderbolt 2 controller which according to Intel's and Wikipedia's website is falcon ridge which means it should support Display port 1.2 natively. Plus, on apple's thunderbolt page they specifically mention connecting a 4K display to a macbook pro through the thunderbolt port (not which is suggested by the support page listed above):
"Now with Thunderbolt 2 built into the new Mac Pro and MacBook Pro with Retina display, you can connect the latest 4K desktop displays and get double the bandwidth for your peripherals. And the two generations of Thunderbolt technology are compatible with each other."
Also, the Apple mini displayport support page has not been updated since 2012 but I believe it is just showing old information
The BIG piece of evidence against the new macbook pro's supporting 4K through the thunderbolt port is that on apple's tech specs page they specifically mention 4K under the HDMI section but make no mention of it under the thunderbolt 2 section.

I like the new rapid release, but I don't like how it's done.

Hello Firefox users.
I have a suggestion for your rapid release program. Ever since Firefox 2, I have been a loyal fan. Each update had a meaning and a purpose.
Ever since Firefox 5, each update makes slight improvements to technologies that aren't even used by the majority of the web. I'm not criticizing the updates you give, but instead how they are delivered.
Since Firefox 5, every 6~ weeks, a new firefox is released with a new version number. They offer little new.
My suggestion is to stop increasing the main version number.
When you go to your Firefox version, it says Firefox 7.0.1. At the this rate, the second digit of the firefox version will likely NEVER be used. How can they give a decent update in less than 6 weeks? That wont happen, they will include it in the next release.
Instead I propose a slightly revised plan. Instead of increasing the main version number, increase the second version number.
For example;
Firefox 8 is coming out very soon, instead of releasing it as Firefox 8, instead release it as 7.1. Firefox 9 can be released as 7.2. Firefox 10 can be released as 7.3, and etc.
Based on the old plan (before rapid release) a MAJOR update would be released very rarely. Example:
Firefox 2.0 released October 24th, 2006
Firefox 3.0 released June 17, 2008
That's about '''1 3/4 years later'''! In that same time span, Firefox will have increased 15 version numbers! That means '''we will be at version 22 in 1 3/4 years'''!
I am in no way suggesting reverting. The new rapid release helps get new technologies out there.
Here is my plan:
* Firefox 7.1 (8) Week #6
* Firefox 7.2 (9) Week #12
* Firefox 7.3 (10) Week #18
* Firefox 7.4 (11) Week #24
* Firefox 7.5 (12) Week #30
* Firefox 7.6 (13) Week #36
* Firefox 7.7 (14) Week #42
* Firefox 7.8 (15) Week #48
* '''Firefox 8.0 (16) Week #54'''
The six week plan with incremental updates will give us Version 8 on Week 54, almost one year after Version 7. This will allow for technologies to be released without undermining the huge progress that was made from version Firefox 1.0 - 4.0.
This will stop the large amount of complaints that Firefox has been receiving.
The rapid release that Chrome uses works well because they started with it, and they are used to it.
I hope Firefox will consider this plan instead of the old one. I cannot see any flaws in it, but if you can, '''please''' point them out, as I would like to either rebuttal them, or agree with them.

They do, just may not seem to be as obvious or as big as the the Firefox 4.0 release was in abundance of features.

How do i change the white background with the new ios7?

I just upgraded my iPad mini to iOS7 and now my videos are not titled, or the letters are white and are invisible against the new white background. How can I change this??

It is rediculous,
up to IOS6 the iPhone was a perfect device for someone with low vision, well structured, good contrast and readable fonts.
But things got "improved". What a pitty that Apple has given away that benefit for a lightweight design which reduces ergonomics drastically. Now IOS is SW where design dominates usability.
Yes, you can use larger fonts, yes, you can use fat fonts but that does not change the keyboard layout.
It startet in IOS6 with the update of the keypad for the phone application (thin black keys on a flashing white background) and is continued with the vision unfriendly design from IOS7.
Please, have the flashing white background configurable so a structuring reappears or have the background configurable to white or black.

Deleted iPhoto Photos showing in the new Photos app

I didn't see a new spot to ask this so I figured I would post it in the iPhoto section. When my wife and I import to iPhoto we usually delete a bunch of random screenshots,etc. iPhoto doesn't have them but looking back for some reason the new photos app is showing more photos then iPhoto has. Anyone else seeing this behavior?

I have to disagree Terence. It creates a complete copy of the iPhoto database. I verified this by deleting the iPhotos database and photos worked fine. It also added 188GB to my crash plan backup and time capsule backup. I have seen other beta testers say it doesn't but it does in my case. It also did this with no interaction on my part.
It doesn't. It uses Unix Hard Links the actual photos, so while both Libraries report 188 gigs or whatever, they are reporting the same 188 gigs. Or put another way, when you deleted the iPhoto Library, did your disk space go up by 188 gigs? Time Machine and CrashPlan don't deal with these links - BTW, an online service like Crashplan for an iPhoto/Aperture/Photos library has a high risk of data corruption.
I can't figure out why the new photos app is showing more photos then my iPhoto had. It seems to be showing a large chunk of things I previously deleted in iphoto but nothing was in the trash
Your iPhoto Library was corrupted and wasn't cleaning up after deletions properly.
I am not against the new photos app. I want to use it so I hope the Apple Fans don't jump down my throat.
The app either does what you want or doesn't. If it doesn't use another one. For me, it's nowhere near my needs and I have no problem making that decision.

Anyway to resize the new spotlight window?

I've stayed with Lion for a long time before getting the iMac and introduced to Yosemite. Mostly good improvement, but the new spotlight implement is killing it's efficiency big time!
Old spotlight search was on the side, and use a long vertical space to display as much info as it can suggest. Now the new spotlight, is right in the middle of the screen and blocking everything. That's not the worse, it's so tiny in size, especially on the 27 iMac, that most searched files can't even be displayed by the full name. The preview isn't really useful when the preview window is that small?
There isn't an obvious way to resize, or relocate the spotlight window. Is there a hack exist that can do this? Thanks!!

At present Spotlight window cannot be enlarged.
Sidebar and the preview window can be scrolled.

Getting the new operating unit to show up in a PO

Hi,
Besides the standard operating units that come with the EBS suite 12 vision instance, I've created a new operating unit but when I create a PO, I still only see vision operations as the standard operating unit. How do I get create a PO against the new operating unit I just created? I'm sure I'm missing steps but have not been able to find a concise guide.
thanks for any assistance.

You need to attach MO: Operating Unit profile option with your responsibility from where you are creating PO

Ok so I have an iPod touch 4 and I want to get an iPad but don't know if I should get the iPad 2 or wait for the new one. I am 14 years

iPad 2

Well, it depends how long you can wait. We can't discuss rumors on here about release dates.
Look at what you actually need though and decide how soon you need something.
What you'll want to realize is that every year or two something new will come out.. so you have to learn to fight off the "I need the new one" bug if you want to be satisfied with your purchase. At your age you probably won't get the opportunity to upgrade for a while, so you'll have to learn to live with your purchase decision longer.
If the iPad 2 in it's current state does everything you want, and you enjoy playing around on it a lot, I'd get it now and be happy. If you feel like you want the newest of the new and are willing to wait (in line and for it to release) then you should wait for the next release.
The iPad 2s are finally becoming available after many months backlog, so keep in mind the next release will likely be the same way and think if you could really wait that long to get something.
Alternatively you could also consider getting a used iPad 1, then use that while waiting for the next version. The used one could then be resold for a fair amount once the new one comes out. Apple products tend to have a pretty good resale value, and the iPads are extraordinarily popular.

How to Create New Maintenance Order using IP30 against the deleted one

Dear Sir,
We have an equipment having Monthly Maintenance Schedule . Using IP30 , we had generated Maintenance Order for next 3 months (i.e Jan / Feb / March ) . Due to some change in the Task List , We decided to Delete these earlier generated Maintenance Orders and then generate the fresh Orders usiing IP30 . To set Delete Indicator , we used Tcode IP02 and these Orders were marked with Delete Indicator .
Subsequently using IP30 , we tried to generate fresh Maintenance Orders ( for month Jan / Feb / March ) for this Maintenace Plan. But no fresh Orders are getting generated . On Analysing it further , we find that for this Maintenance Plan ( Tcode IP02) under the tab <Maintenance plan Schedule Call > , against the Jan / feb / March months Sceduling Type/Status is appearing as "Schedule Completed" .
Kindly guide us as how can we generate the fresh Orders .
With Thanks and Rgds
Sonia

Hi
I would suggest two option for this query:
Option1: You can use the existing (deletion flaged) orders, by deleting all the operation in the created PM order and in order, goto Extras - select the Task list which you have done changes. In this option your exsisting plan is not distrubed.
Option2: If any way you want new PM orders, then Goto schedule of the plan & restart, system will ask wheather to delet/ skip the existing schedule.
Hope this options will help you to take decision.
Regards
S Ramanujam
Edited by: Ramanujam Srinivasan on Dec 29, 2009 8:13 AM
Edited by: Ramanujam Srinivasan on Dec 29, 2009 8:15 AM

Update an existing bug doesn't show the new test run "steps to reproduce" in TFS

Hello all...
So let's say I have a bug. Then I run a new test because I've been told it's fixed. This second test fails. I choose "Update an Existing Bug" and I'm presented with the window that looks like I'm reporting a new bug - all the info is there. I save
and close, go into TFS, refresh...and I all I see is the original bug that I reported, but none of the new stuff I just did. Where is that new stuff? I would expect it to push the old stuff down, and the new stuff I'd see above. My developers get mad at me
because I've moved their tasks back to "To Do" but they see the old bug and complain that it's fixed, even though I have new info to report, they don't see it. I'm in VS/MTM 2012 V4...
Thank you for your help!

Hi OneOfThreeDevs,
As you said that you did not see the new bug report in TFS after you
reporting a new bug - all the info by choosing "Update an Existing Bug" option in test runner.
I suggest you need to check if you can see the new bug report by selecting
Testing Center->Test->Verify
Bugs.
(1)If you could not see the
new bug report in the bugs list, I doubt that you may be not update an Existing Bug successfully.
Therefore, I suggest you can refer the following link to create a new bug report by the update an Existing Bug.
Reference:
http://msdn.microsoft.com/en-us/library/vstudio/dd465175(v=vs.110).aspx
(2)If you could see the new bug report in the bugs list, I suggest you can try to input the bug ID in Team Explorer Windows and then
check this issue again.
In addition, you can try to see the new bug report by the web access.
Reference:
http://msdn.microsoft.com/en-us/library/ee523998(v=vs.110).aspx
Best Regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

I am having trouble downloading the new outlook mail.It returns error message about a sync services agent, database daemon etc. Also, I Can send an email but it returns with message: "message could not be sent." Any suggestions for this Apple novice?

I try and download the new Outlook update and it says I have to close sync services agent and others.I do that,or 'think' I do but it doesn't close.

PS - have found other posts indicating that clips smaller than 2s or sometimes 5s, or "short files" can cause this. Modern style editing often uses short takes ! Good grief I cannot believe Apple. Well I deleted a half a dozen short sections and can export, but now of course the video is a ruined piiece of junk and I need to re-do the whole thing, the sound etc. which is basically taking as much time as the original. And each time I re-do it I risk again this lovely error -50 and again trying to figure out what thing bugs it via trial and error instead of a REASONABLE ERROR MESSAGE POINTING TO THE CLIP IT CAN'T PROCESS. What a mess. I HATE this iMovie application - full of BUGS BUGS BUGS which Apple will not fix obviously, since I had this product for a few years and see just hundreds of hits on Google about this error with disappointed users. Such junk I cannot believe I paid money for it and Apple does not support it with fixes !!!
If anyone knows of a GOOD reasonably priced video editing program NOT from APPLE I am still looking for suggestions. I want to do more video in future, but obviously NOT with iMovie !!!

Suggested defense against the new "Bash bug"?

Similar Messages

Maybe you are looking for