UPGRADE TO OS X 10.7 UPDATE
UPGRADE TO OS X 10.7 PATCH

Impact: In certain configurations, a remote attacker may be able to execute arbitraryДescription: An issue existed in Bash's parsing of environment variables.

UPGRADE TO OS X 10.7 UPDATE

OS X bash Update 1.0 is now available and addresses the following:ДЄvailable for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, Here's the description from Apple's security-announce mailing list (I haven't seen it on HT1222 yet):

dempson Smack-Fu Master, in training et Subscriptor jump to post.

UPGRADE TO OS X 10.7 PATCH

The OS X update wasn't yet available from Software Update on our Mavericks system when we checked, but in the meantime you can grab the Mavericks, Mountain Lion, and Lion versions of the patch manually from Apple's software downloads site. In the case of Web servers, it can allow attackers to gain full control ofВ the system.В Exploits of the bug have already been spotted in the wild, and end users and server administrators are all encouraged to patch their systems as soon as possible. Shellshock, in essence, allows attackers to issue commands to systems via malformed environment variables. The company previously stated that Macs 'are safe by default and not exposed to remote exploits of bash unless users configure advanced UNIX services.' Non-jailbroken iOS devices shouldn't be vulnerable to the exploit at all. An Apple representative told Ars that the company would not be releasing an individual patch for users running the current OS X Yosemite developer or public beta builds, but the rep went on to sayВ the bug will be fixed in future builds of the software. The update requires the OS X 10.9.5, 10.8.5, or 10.7.5 updates to be installed on your system first. When installed on an OS X Mavericks system, the patch upgraded the Bash shell from version 3.2.51 to version 3.2.53, something that users could already do manually if they were so inclined. Bash, which is the default shell for many Unix and Linux-based operating systems, has been updated two timesВ to fix the Shellshock remote exploit bug, and many Linux distributions have already issued updates to their users. Further Reading Bug in Bash shell creates big security hole on anything with *nix in it Apple has just released the OS X Bash Update 1.0 for OS X Mavericks, Mountain Lion, and Lion, a patch that fixes the 'Shellshock' bug in the Bash shell that we first reported on last week.

Upgrade to os x 10.7