Important Security Update

[Stephen Hart]

Apple has released an important security update to High Sierra, available through the Updates tab in the Mac App Store>
Apple says "Install this update as soon as possible."
It's quick to download and does not require a restart.

Here's an article on the update, which was publicized Tuesday afternoon.

[Jay Cline]

This build number after the version number (17B1002) reflects the updated system.

Screen Shot 2017-11-29 at 11.07.44 AM.png (11.07 KiB) Viewed 848 times

[Stephen Hart]

Note that you have to click on the Version number to display the build number.

[Stephen Hart]

Some users are apparently experiencing file sharing issues after installing the security update. Here's an explanation and the fix:
http://appleinsider.com/articles/17/11/ ... ks-feature

I would only recommend this if you are experiencing the file sharing issue discussed.

[Stephen Hart]

Security Update 2017-001 is now being installed automatically, even if you manually installed previously. It changes the High Sierra build number to 17B1003. This apparently fixes the file sharing issue and bypasses having to manually install.

Apple's page on Security Update 2017-001:

https://support.apple.com/en-us/HT208315

Here's a Tidbits article on both updates, and with more explanation:
http://tidbits.com/article/17655

Remember, this exploit--before patching--required uninhibited physical access to your Mac (and maybe logging on an unsecured LAN).

[Opinion] Comments in the article and in the comments section below repeat the trope that you should never install an update immediately. That ignores the extreme rarity of such a mistake. And it ignores the many security enhancements built into every update. And it ignores the continuous nature of updates, any one of which could theoretically fix an older bug but introduce a new one. There's no magic sweet spot in the update timeline. So I'll stick to my advice, which mirrors Apple's: keep your Mac updated for best security.