Security bug in the command program BASH for Mac OS and Linux

Vulnerability Summary for CVE-2014-6271
Original release date: 09/24/2014
Last revised: 09/24/2014
Source: US-CERT/NIST
Overview

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.
[link to web.nvd.nist.gov]

----------------------

Apparently this bug makes Macs and some Linux distributions vulnerable to have their computers taken over, and the bug fix didn't work either:
[link to twitter.com (secure)]


didn't see a thread here and this should be important for those that use Mac OS and Linux.