Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Apple Releases macOS High Sierra 10.13 Supplemental Update With Fix for APFS Disk Utility Bug and Keychain Vulnerability

jtara said:
Unfortunately, if you want/need to fix the password-reveal problem, it will take a lot longer than 15 minutes. You have to backup your drive, reformat, and restore the drive.

I'd chosen not to encrypt. I use a Mac Mini in my home, and use it for software development, and can use all the performance I can get out of it. In my workflow, there is a lot of copying of files which are then not changed, and so COW is a huge improvement! Installation of a new 1GB flash drive (OCZ Vector 180 that I'd purchased a year ago and had never installed) and use of APFS has significantly improved my build times. Still, at about 500mbyte/sec (about the limit of the SATA3 interface on the Mac Mini...) I am envious of the newer Macbooks that are getting up to 2000mbyte/sec!

FWIW, I replaced the original 128G flash drive portion of the original fusion drive, leaving the original hard drive. I don't use the hard drive, but did leave it connected. It was more convenient to leave it installed, as it would have required more of a tear-down to remove it. I might use it to store unimportant files. I don't have much trust in a 5 year old hard drive!

I will pass on this update and await something more substantial. I am experiencing no problems with High Sierra.
Click to expand...

I could be wrong, but it sounds like this bug only impacts newly created (via Disk Utility) encrypted APFS volumes. I don't think your OS System volume (if encrypted by Filevault2) is impacted...
 
  • Like
Reactions: Duane Martin, adrianlondon, dBeats and 1 other person
utkarsh10 said:
I am unable to update. Looks like a bug in the update file itself. Would advice people to stay away for now.

PS I had done a clean install of High Sierra at launch
Click to expand...
I,am having same problem.
Restoring now the MBP to older version
 
First let me say, I'm not the most savvy MacBook user. I spend most of my time working in iOS. However, my 2015 MacBook is having problems connecting/staying connected to wifi networks. My wife's MacBook (same year model) hasn't been updated yet and she isn't having any of the wifi issues that I'm experiencing on Hight Sierra.
 
  • Like
Reactions: pat500000
BAROREF said:
I,am having same problem.
Restoring now the MBP to older version
Click to expand...
No need to restore. Follow the following -
Quit installer -> Choose utilities -> choose your startup disk
You'll login to your current OS
To be on the safer side, clean Cache from Library
[doublepost=1507233586][/doublepost]
RevTEG said:
First let me say, I'm not the most savvy MacBook user. I spend most of my time working in iOS. However, my 2015 MacBook is having problems connecting/staying connected to wifi networks. My wife's MacBook (same year model) hasn't been updated yet and she isn't having any of the wifi issues that I'm experiencing on Hight Sierra.
Click to expand...

True. Noticed it on a couple of Macbooks & Macbook Pro's
 
  • Like
Reactions: RevTEG
RevTEG said:
First let me say, I'm not the most savvy MacBook user. I spend most of my time working in iOS. However, my 2015 MacBook is having problems connecting/staying connected to wifi networks. My wife's MacBook (same year model) hasn't been updated yet and she isn't having any of the wifi issues that I'm experiencing on Hight Sierra.
Click to expand...

There might be a 'simple' fix.

Copy /Library/Preferences/SystemConfiguration to desktop, delete the original, restart your Mac
All Networksettings are reset this way, like in deleted, you need to input passwords again.
If this does not solve the problem you could copy the original from desktop back to where it was before.
 
  • Like
Reactions: RevTEG
This Supplemental Update continues to show even after restarting/updating...Is it even updating or is the update install failing?
 
Should the version number have changed? After the update, my iMac is still saying macOS 10.13 (17A365).

App Store says no updates available, but this supplemental update doesn't show in the list of updates installed in the last 30 days.
 
Knighstalker said:
I just re-downloaded the installer and it's the same version as the previous installer, 13.0.64. Is there build information elsewhere in the installer?
Click to expand...
I just redownloaded the High Sierra installer and got 13.0.66.

You might have been too quick off the mark.

Another clue: most of the files inside the SharedSupport folder in the installer package in my new download are dated today rather than early last week.
 
jtara said:
Unfortunately, if you want/need to fix the password-reveal problem, it will take a lot longer than 15 minutes. You have to backup your drive, reformat, and restore the drive.
Click to expand...

That's actually not true. There is no vulnerability for the original APFS volume (typically your boot volume). It's only when you *add* a new APFS volume to either the boot drive or any other drive that this occurs.
 
  • Like
Reactions: ChrisChaval, Duane Martin, mw360 and 1 other person
Man, I’ve been down on Adobe for days and the bug was on Apple’s end? Well. Sorry Adobe. Sorry for this one. Not for the rest.
 
dempson said:
I just redownloaded the High Sierra installer and got 13.0.66.

You might have been too quick off the mark.

Another clue: most of the files inside the SharedSupport folder in the installer package in my new download are dated today rather than early last week.
Click to expand...

Yeah, that's what I figured after I realized what "supplemental" meant!
 
BugeyeSTI said:
I’ve downloaded and applied the update twice and it continues to ask me to download and update after restart... It shows as available update and never moves to installed.
Click to expand...
ugg. not that old gag again..
 
justperry said:
There might be a 'simple' fix.

Copy /Library/Preferences/SystemConfiguration to desktop, delete the original, restart your Mac
All Networksettings are reset this way, like in deleted, you need to input passwords again.
If this does not solve the problem you could copy the original from desktop back to where it was before.
Click to expand...

Thanks for the help. I’ve never done what you’re recommending. How bad will it be if I mess something up trying this? Lol
 
Not sure whether this is anything to do with this update, but I can't resize my Spotlight window now.
 
MacRumors said:



Apple today released a supplemental update to macOS High Sierra 10.13, the first update to the macOS High Sierra operating system that was released to the public in late September. The macOS High Sierra 10.13 update comes just over one week after the release of macOS High Sierra.

The new version of macOS High Sierra 10.13 is a free update for all customers who have a compatible machine. The update can be downloaded using the Software Update function in the Mac App Store.

macoshighsierra.jpg

The supplemental macOS High Sierra 10.13 update addresses a software vulnerability that could expose the passwords of encrypted Apple File System volumes in plain text in Disk Utility.

Apple has released a support document alongside the Supplemental Update that walks users through the process of protecting their data if macOS High Sierra is showing a password instead of a password hint on an encrypted APFS volume.

Steps include installing the new update, creating an encrypted backup of data for the affected volume, erasing the drive, reformatting to APFS, then APFS (Encrypted), and finally restoring the data that was backed up.

A separate security support document says that the update also fixes a vulnerability that could let a hacker steal the usernames and passwords of accounts stored in Keychain using a malicious third-party app.

And finally, according to the release notes accompanying the update, it also improves installer robustness, fixes a cursor graphic bug in Adobe InDesign, and resolves an issue where messages couldn't be deleted from Yahoo accounts in Mail.

macOS High Sierra introduces a new more modern file system designed for flash storage (APFS), Metal 2, Safari improvements that protect user privacy and prevent autoplay videos, and improvements to several apps like Photos, Mail, Notes, and more.

Article Link: Apple Releases macOS High Sierra 10.13 Supplemental Update With Fix for APFS Disk Utility Bug and Keychain Vulnerability
Click to expand...
They really need to update and fix Disk Utility. (1) 10.13 doesn't seem to want to recognise any disks that are not APFS and (2) When trying to reformat a volume, 9 times out of 10 the disk wont elect for formatting and it has to be done a second time. I like the speed and theory of HS but I cant help feeling the release was rushed. Maybe Donald Trump organised it?
 
  • Like
Reactions: leventozler
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back