Apple Addresses Meltdown and Spectre in macOS Sierra and OS X El Capitan With New Security Update

[bsolar]

Considering that we're talking about OS kernel patches, and the macOS (Apple/IBM/BSD) kernel is very different from the one in Windows or Linux, I wouldn't expect them to have the same problems. It's not like you can quickly port this kind of code between different software architectures.

Actually the report I mentioned is about Broadwell and Haswell firmware updates, not OS kernel patches.

 

[philfry]

I'm usually the first to patch security updates. My Macbook Pro 2007 running el capitan. I'm not sure that is a good idea. I think Meltdown affects older CPUs much more than newer ones. I'm afraid this thing will get even slower.

 

[camelia]

Well I think I've stopped the boot loop, finally managed to get into safemode (holding SHIFT was being ignored) and removed my anti virus software "ESET Cyber Security Pro" and so far touch wood its not looped again, it's been about 10 minutes now which is a good sign. I noticed as I first restarted after installing the update that ESET warned me that there was an update available for the AV software. This OS update may be the reason why ESET sent out the update announcement. I'll try reinstalling it tomorrow and see how it goes.

1.- Uninstall that ESET crap...
2.- The Av was the problem

 

[michael.bratley]

Since installing the update my machine is much slower and graphics are particularly bad. Has anyone else experienced this?

 

[Andydigital]

You'll likely see some slowdown after the update. My Macbook Pro reindexed the SSD when I finally got it working again. It took a good 25 minutes or more to complete. Open up Spotlight and type something and if it says indexing then you know you are seeing the same thing.

 

[michael.bratley]

You'll likely see some slowdown after the update. My Macbook Pro reindexed the SSD when I finally got it working again. It took a good 25 minutes or more to complete. Open up Spotlight and type something and if it says indexing then you know you are seeing the same thing.

My machine does not appear to be indexing. It's almost like my machine is in safe made. The screen flickers when I first log in.

 

[Patrice Brousseau]

Applied on my early MBP 2011 (Sierra): definitely a firmware update (heard the tone) , probably the microcode, hoping that it won't act like on some PC's lately (reboots)...

 

[Guy Clark]

Why the Delay ?

Fixes were released for macOS High Sierra in 10.13.2
[doublepost=1516749176][/doublepost]

Applied on my early MBP 2011 (Sierra): definitely a firmware update (heard the tone) , probably the microcode, hoping that it won't act like on some PC's lately (reboots)...

A very long winded update to macOS Sierra on my Late 2009 iMac with a Seagate SSHD Hybrid Drive. Thought for a moment it was going to be a fresh install.

 

[jerry333]

Anyone install this that hasn't had any issues?

None on two nMP.
[doublepost=1516749575][/doublepost]

Great but how do you check that macOS Sierra has been patched and received this update ?

From the command line: sw_vers
Expect:
nProductName: Mac OS X
ProductVersion: 10.12.6
BuildVersion: 16G1212

 

[MyMacintosh]

still on macOS 10.13.2 because I dont trust upgrading apple devices anymore with throttlegate. Same with iOS.

 

[Wando64]

How about iOS 9 or iOS 10? Lots of devices stuck there.

If you are running IOS9 or 10, from a security point of view Meltdown and Spectre should be the least of your worries.

 

[kazmac]

Good. Glad I waited an did not install High Sierra.

 

[urtules]

How about iOS 9 or iOS 10? Lots of devices stuck there.

You should update to iOS 11.
[doublepost=1516752513][/doublepost]

Does this affect Mavericks?

If you didn’t receive security update you are at risk. The vulnerability is cause not by macOS bug but Intel CPU. I recommend updating to High Sierra

 

[camelia]

None on two nMP.
[doublepost=1516749575][/doublepost]
From the command line: sw_vers
Expect:
nProductName: Mac OS X
ProductVersion: 10.12.6
BuildVersion: 16G1212

and El Capitan?

 

[LauraJean]

No. These fixes were briefly but incorrectly noted in the previous security update notes, but Apple revised the notes to show that the fixes only applied to 10.13.2.

Yeah, I thought the Dec. 6 security update did the trick also. How could Apple screw up its update notes? And this, the real update for the two vulnerabilities, presents a black screen and takes multiple boots??? After reading these comments, I would rather leave it then take it. Will wait a few days...

 

[pubwvj]

Apple, Microsoft, Intel & friends should be fixing for all systems all the way back. There are still a large number of people using Yosemite and earlier systems in the MacOS world. Lots of PCs out there running earlier versions of Windows. If this is such a big deal it should be handled broadly. How do you want your nuclear power plant to MeltDown? Realize it is running older hardware... Nasty.

 

[Paddle1]

You should update to iOS 11.

I was talking about devices that can't update to iOS 11. Not that it matters in the end since there are other security issues regardless.
[doublepost=1516754404][/doublepost]

If you are running IOS9 or 10, from a security point of view Meltdown and Spectre should be the least of your worries.

A fair point that I realized.

 

[Ener Ji]

Anyone update a 2012 Retina MBP? I'm a bit nervous to install this update right away, given some of the reports of boot loop problems.

Also - any users of the latest version of Little Snitch successfully update? It's the kind of application that I could see causing a problem with a kernel update.

 

[EdT]

Great but how do you check that macOS Sierra has been patched and received this update ?

You go to a site known to have the malware and if your private information is stolen and your credit is wrecked and your bank account drained then your software wasn’t patched.

 

[kryptticAZ]

None on two nMP.
[doublepost=1516749575][/doublepost]
From the command line: sw_vers
Expect:
nProductName: Mac OS X
ProductVersion: 10.12.6
BuildVersion: 16G1212

OK, good. Looks like the installation went through on mine then--despite the black screen that required a force restart, followed by three reboots, followed by a login screen with no cursor nor ability to type in my password. Other than that, a perfectly smooth experience... LOL

 

[SeaFox]

I don't think Security Updates show as "recently installed" in the software update pane. Only applications show up for me (Safari and iTunes today).

I see security updates on mine. I go to "About this Mac" and the Software Update button there and recent updates do appear for me.

 

[I7guy]

Can we get the same for iOS 10?

You never know. Apple may break some patterns and provide a patch for ios 10.

 

[MacSince1985]

The NVidia web drivers are not compatible with this update on Sierra.

 

[xtianpe]

My Early 2013 Macbook Pro is rebootiing every 3 minutes or so, even when sat doing nothing, since installing this Sierra update. DONT DO IT!!!!!!!!! Apple are fecking idiots.
[doublepost=1516738442][/doublepost]It's literally sat with no programs running at all, everything shut down but the OS and it is rebooting after about 2 minutes.
[doublepost=1516738557][/doublepost]It's even rebooting when I try to go to recovery mode or whatever its called, well done Apple I have a huge paperweight now.

I had the same problem. I uninstall ESET antivirus (its daemon crash system). Now it's ok.

 

[Dangermen]

Even if Apple fixes spectre and meltdown for Sierra and Capitan, they still aren’t fixing HUNDREDS of open CVEs for old OS exposures. Great, so you fixed a broken window but your roof is still caving in.