It's also a rather big jump in build numbers. 365 to 405.
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Apple Releases macOS High Sierra 10.13 Supplemental Update With Fix for APFS Disk Utility Bug and Keychain Vulnerability
- Thread starter MacRumors
- Start date
- Sort by reaction score
I started the update with my 2017 MBP 13" connected to a TB display with a dongle. The update has been stuck at time remaining "About a minute" for 45m now. I unplugged the TB display and the screen switched back to the MBP, cursor is active, but the status bar is only 1/8th the way across and stuck. Ugh.
I'm encrypted with FileVault FWIW.
Anybody else have issues like this? I have some meetings and can let it run for another 2 hours, but I'm fearing bad things if I force-reboot..
I think Apple should look out for new CEO. Cannot maintain what Steve has left over.
I may lose my credit card bank accounts with all these crappy bugs. Its seriously wake up call for apple.
I may lose my credit card bank accounts with all these crappy bugs. Its seriously wake up call for apple.
As far as I can tell from that support document...
The volume is encrypted with a randomly generated key. That key is itself encrypted with the password. The password shouldn't need to be stored anywhere. Entering the correct password decrypts the key and the key decrypts the drive. If the password is compromised, the volume key is compromised too, and changing the password would be too little too late. Of course you can choose to gamble on whether anyone stole your encryption key in the available window.
I just re-downloaded the installer and it's the same version as the previous installer, 13.0.64. Is there build information elsewhere in the installer?
Depends how long they (and whichever other malicious hackers, government agencies knew about it)...
Hint: they did not find out and fix it over the course of a single day.
The exceptional response time of this update is a tacit admission by Apple that this APFS Disk Utility Bug and Keychain issue were serious vulnerabilities that needed immediate patching.
Vulnerability *
Response time ***** Kudos for that.
I'm not imagining things. I think Metal 2, which now runs the OS UI through it, wasn't fully functioning with the 10.13 release. After today's update my '12 rMBP is flying. Hot room, many apps open. I can't seem to bog it down. Animations are buttery smooth. Anyone else notice?
They were probably preparing to release the Keychain fix anyway, but bundled in the Disk Utility fix along with it. That bug NEVER should have existed! I hope the developer responsible for that gets 10 lashings for sloppiness.
That's not a bug, it's an intentional choice to wait before making that available. Probably has something to do with performance issues.
[doublepost=1507231055][/doublepost]
Yeah, that is what I was wondering about, if the bug isn't specific to High Sierra, then where is the fix for those who haven't updgraded yet?
Starting over from scratch with a new file system is all very well and only way to really do security, BUT as long as you learn something along the way..
You could say Apple keychain bug is just like any normal bug that would be a fix for... BUT the thing where i draw the line is privacy.... There are no exceptions to that...
Apple should have tested this better. the can makes mistakes and bug fixes for anything else they like, but not for for this.... I like to take Apple seriously with privacy, but not when things like this happen.. to a "privacy first" which it really matters... That just doesn't happen. As even if u delay stuff, then i'd rather do that than rush it out, then discover there is a major issue like keychain afte-the-fact.
There isn't one... its specific to High Sierra. I just check my system OS X 10.12.6 and "No Updates available"
Last edited:
Never mind... They haven't updated the installer yet. I did not understand that the supplemental update was in addition to the installer. If you haven't updated your macOS yet, either wait for the updated installer or go through the two step process of running the installer and then the supplemental update.
Well, they fixed that one at least.
Been selling a product to law enforcement since 2008 that will all of the passwords (including the admin) out of the Keychain. We've demonstrated it to Apple on numerous occasions and their government guys even help us sell it to law enforcement. It still works fine after this update and all past ones.
No, I mean that the bug also afflicts Sierra and maybe earlier, so where is the update for the rest of us. I know it's not there, I'm asking why not and when.
I'm guessing it will roll in the next beta. odd timing though since there were other random bug fixes too.
The keychain bug isn’t specific to HS. I expect we’ll get a security update for Sierra shortly.
I bet they didn't even call a meeting. Craig just forwarded the bug report out in an email with a pink background.
