MacOS – Any way to update OSX 10.4’s Bash version

bashmacospowerpc

I'm running Bash version 2.05b.0(1)-release (powerpc-apple-darwin8.0) on a PowerMac (non-Intel) G5. I often connect to the internet, but not as a server and I believe my version of Bash is vulnerable to the Shellshock exploit.

Upgrading the OS past 10.4.11 Tiger is not an option as this computer can't be upgraded for reasons.

Can I recompile bash for my system or are there any users who may have devised a patch?

Best Answer

Do you have gcc and other tools installed? You can check with which gcc and then gcc --version. If you don't, you can install these from the Developers Tools DVD that came with the system, or you can download from Apple or gnu, but it might be tricky to get a version that will run.

Once you have gcc and the other command line tools installed, the next challenge is to obtain a bash source that will successfully compile and build on an old OS. I'm going to try this myself for 10.5 and 10.6.

Note that you don't need to worry about having a vulnerable Bash if the machine doesn't run a web server and isn't running services exposed to anyone but you. If you're the only user, and you don't run web sharing or other external services, you don't need to both.