Page 1 of 1

Important Security Update

Posted: Wed Nov 29, 2017 10:20 am
by Stephen Hart
Apple has released an important security update to High Sierra, available through the Updates tab in the Mac App Store>
Apple says "Install this update as soon as possible."
It's quick to download and does not require a restart.

Here's an article on the update, which was publicized Tuesday afternoon.

Re: Important Security Update

Posted: Wed Nov 29, 2017 11:09 am
by Jay Cline
This build number after the version number (17B1002) reflects the updated system.
Screen Shot 2017-11-29 at 11.07.44 AM.png
Screen Shot 2017-11-29 at 11.07.44 AM.png (11.07 KiB) Viewed 851 times

Re: Important Security Update

Posted: Wed Nov 29, 2017 1:36 pm
by Stephen Hart
Note that you have to click on the Version number to display the build number.

Re: Important Security Update

Posted: Thu Nov 30, 2017 10:53 am
by Stephen Hart
Some users are apparently experiencing file sharing issues after installing the security update. Here's an explanation and the fix:
http://appleinsider.com/articles/17/11/ ... ks-feature

I would only recommend this if you are experiencing the file sharing issue discussed.

Re: Important Security Update

Posted: Thu Nov 30, 2017 3:56 pm
by Stephen Hart
Security Update 2017-001 is now being installed automatically, even if you manually installed previously. It changes the High Sierra build number to 17B1003. This apparently fixes the file sharing issue and bypasses having to manually install.

Apple's page on Security Update 2017-001:

https://support.apple.com/en-us/HT208315

Here's a Tidbits article on both updates, and with more explanation:
http://tidbits.com/article/17655

Remember, this exploit--before patching--required uninhibited physical access to your Mac (and maybe logging on an unsecured LAN).

[Opinion] Comments in the article and in the comments section below repeat the trope that you should never install an update immediately. That ignores the extreme rarity of such a mistake. And it ignores the many security enhancements built into every update. And it ignores the continuous nature of updates, any one of which could theoretically fix an older bug but introduce a new one. There's no magic sweet spot in the update timeline. So I'll stick to my advice, which mirrors Apple's: keep your Mac updated for best security.