Apple Releases macOS High Sierra 10.13.2 Supplemental Update With Spectre Fix

[MacGekko]

This video about 3:30 onwards has some good stuff (the stuff prior to 3:30 is about the root bug)

Another example of a graphic glitch:

Except when you read the comments it seems there are logical explanations for this performance and after the new file system is indexed most report their Mac computers running faster on High Sierra.

And a recent video update explained that when the Youtube creator installed the latest High Sierra update, 99 percent of his problems were fixed, what a waste of time.

 

[zepfhyr]

No, Apple revised the document. The Meltdown patch only applies to 10.13.2.

[doublepost=1515439066][/doublepost]
See my reply to the other response: Apple revised their document and only 10.13.2 is fixed against Meltdown at this time.

Interesting. They updated it the day after they posted it. On January 4th, it said it was available for El Cap and Sierra, as well.

Crap. Now I've got to make all my users upgrade to High Sierra.

 

[chrfr]

This High Sierra update patches the kernel.

The kernel isn't patched with the 10.13.2 Supplemental update. Output of uname -a both before and after the update reports:

Darwin hostname.local 17.3.0 Darwin Kernel Version 17.3.0: Thu Nov  9 18:09:22 PST 2017; root:xnu-4570.31.3~1/RELEASE_X86_64 x86_64

 

[wol]

Of course, the only question we are all interested in is:

Does Safari feel snappier?

Anyone...?

 

[Supermacguy]

Thanks Apple for updates for Sierra, and even El Cap!

 

[chrfr]

Interesting. They updated it the day after they posted it. On January 4th, it said it was available for El Cap and Sierra, as well.

Crap. Now I've got to make all my users upgrade to High Sierra.

Correct. It's a confusing mess.

 

[MacNut]

How dare they abandon people with machines more then 8 years old.

Yes, how dare they abandon their better hardware for the crap they are producing now.

 

[eoblaed]

Nice to know it's a free update.
When was the last paid upgrade?

Mountain Lion was the last paid upgrade. 2012.
[doublepost=1515441407][/doublepost]

Yes, how dare they abandon their better hardware for the crap they are producing now.

I still have a 7+ year old piece of hardware that I use for a singular purpose. It does get used everyday.

I also have some very up to date pieces of mac hardware. I can tell you which I prefer using ... and it's not the stuff that's over half a decade old.

 

[RossAdamSF]

So - is the actual fix for this going to be to wait for new processors? What's the likely timeline for Intel to release something new and Apple to turn them around into MBPs?

 

[petsounds]

The kernel isn't patched with the 10.13.2 Supplemental update. Output of uname -a both before and after the update reports:

Darwin hostname.local 17.3.0 Darwin Kernel Version 17.3.0: Thu Nov  9 18:09:22 PST 2017; root:xnu-4570.31.3~1/RELEASE_X86_64 x86_64

Interesting. Well, something changed if SecuritySteve is reporting the SW_VERS changed. Why otherwise would Apple release Safari for HS as a supplemental update vs. just a straight Safari update as on El Cap and Sierra?

 

[Guy Clark]

That's such stupid thinking. Are 7+ year old PCs running Windows performing far better?

Any machine, from any manufacturer, is going to be well overdue for replacement after 7+ years.

That is precisely the mindset that encourages Apple and PC manufacturers condones conning consumer into purchasing equipment with non user upgradeable components so they have literally gotcha.

My self upgraded Late 2009 iMac with a 3.33GHz Intel Core 2 Duo CPU, 16GB RAM and SSHD is capable of running rings round many off the shelf PC's and Laptops available even today. It runs Windows 10 in a Parallels Desktop virtual environment with ease whilst not impacting on the performance of the host machine. It plays Blu-ray movies perfectly without dropping frames. It runs AutoCad without effort....

....I think you get my drift!

And if you do have an old but serviceable machine stick Linux on it. I have an old IBM X41 Thinkpad running Lubuntu 17.10 which is simply stunning.

 

[SecuritySteve]

The kernel isn't patched with the 10.13.2 Supplemental update. Output of uname -a both before and after the update reports:

Darwin hostname.local 17.3.0 Darwin Kernel Version 17.3.0: Thu Nov  9 18:09:22 PST 2017; root:xnu-4570.31.3~1/RELEASE_X86_64 x86_64

I noticed this too, but the SW_VERS build for the OS changed - indicating that something was done. It probably was minor, but it is worth noting.

 

[kevo0822]

How long did the update take for you guys? It looks like the update is hanging on my 4K iMac. It’s been about 15 minutes with no changes in the progress bar and it just says “calculating time remaining”...

 

[blackdogaudio]

How long did the update take for you guys? It looks like the update is hanging on my 4K iMac. It’s been about 15 minutes with no changes in the progress bar and it just says “calculating time remaining”...

30 minutes give or take

 

[OldSchoolMacGuy]

Not at all. Fixes should be made to support EVERY machine Apple sold that has the exploit. Otherwise, let the lawsuits begin (again).

Please tell us, on what grounds do you think a lawsuit can be filed and won?

 

[bsbeamer]

How long did the update take for you guys? It looks like the update is hanging on my 4K iMac. It’s been about 15 minutes with no changes in the progress bar and it just says “calculating time remaining”...

MacBook Pro late 2013 took about 10 minutes for download, install and restart. Now running 10.13.2 (17C205). Have NOT updated MacPro 5,1 yet - waiting for NVIDIA drivers.

 

[OldSchoolMacGuy]

That is precisely the mindset that encourages Apple and PC manufacturers condones conning consumer into purchasing equipment with non user upgradeable components so they have literally gotcha.

My self upgraded Late 2009 iMac with a 3.33GHz Intel Core 2 Duo CPU, 16GB RAM and SSHD is capable of running rings round many off the shelf PC's and Laptops available even today. It runs Windows 10 in a Parallels Desktop virtual environment with ease whilst not impacting on the performance of the host machine. It plays Blu-ray movies perfectly without dropping frames. It runs AutoCad without effort....

....I think you get my drift!

And if you do have an old but serviceable machine stick Linux on it. I have an old IBM X41 Thinkpad running Lubuntu 17.10 which is simply stunning.

You've got a lot of confirmation bias going on there along with a lack of experience with a current system.

While the system you use right now may seem fine for you, that's only because you don't have a current machine performance to compare it to.

I can guarantee you that your machine doesn't "run rings around" most off the shelf PCs today. We could get into the weeds about the technical reasons that new processors are far superior to your early two-core from 9 years ago but the fact is, it's not anywhere near the performance of even the low-end chips today.

It's great that your old machine meets your needs. Stick with it. Today's machines are still miles ahead.

 

[simonsi]

Right. Just updated mine via the MAS as usual, however checking the build numbers on the system and Safari - neither are the Spectre-proof builds quoted in the article!

Now going back to the MAS the supplemental update isn't listed as being applied, nor is it available....??? WTF?

Edit: Just did a further manual restart and still the same, no update applied, no update available...

 

[Porco]

Good that they’ve addressed Spectre, but why still no Meltdown patch for 10.11 and 10.12? Is it just an error in the details of Apple’s security update page, or are they just not bothering at all? Weird. And sloppy either way.

 

[Henrar]

A safari-based workaround? Please...

If you’ve read anything about Spectre vulnerability, then you would know why browsers are being patched right now. Next time, before showing how ignorant you are, just research the topic for five minutes.

 

[simonsi]

Good that they’ve addressed Spectre, but why still no Meltdown patch for 10.11 and 10.12? Is it just an error in the details of Apple’s security update page, or are they just not bothering at all? Weird. And sloppy either way.

Would be odd practice for Apple to confirm a particular update <doesn't> fix Meltdown...not a good practice at all (however obvious this case may seem to be).

 

[chrfr]

I noticed this too, but the SW_VERS build for the OS changed - indicating that something was done. It probably was minor, but it is worth noting.

Probably just done this way because Apple seems not to treat Safari/Webkit as a separate update for current versions of macOS.

 

[Sunrisesammy]

Lol I'm not getting High Sierra. PoS full of bugs and performance issues.

Yup. Apple even had me go back to Sierra because my machines were having corruption issues including kernal panics.

 

[chrfr]

Interesting. Well, something changed if SecuritySteve is reporting the SW_VERS changed. Why otherwise would Apple release Safari for HS as a supplemental update vs. just a straight Safari update as on El Cap and Sierra?

See my reply above. Safari updates are integral with the current major version of macOS.

 

[Porco]

Would be odd practice for Apple to confirm a particular update <doesn't> fix Meltdown...not a good practice at all (however obvious this case may seem to be).

But it was already odd practice to say an update applied to 10.11 and 10.12 and then remove the reference. People need clarity, either way.