Apple Releases Second Rapid Security Response Update for macOS Ventura 13.2 Beta

[MacRumors]

Apple today released a second Rapid Security Response (RSR) update for the macOS Ventura 13.2 beta, with the update coming almost a month after Apple provided the first Rapid Security Response test on the Mac.

macOS Rapid Security Response 13.2 (b) is applied to the Mac automatically upon restart, and it is also added to Safari when the Safari app is exited and then reopened.

The first RSR release for the Mac appeared to be a test that did not add new features, with Apple instead making sure the feature works before it is deployed for an actual security update. Today's update is just 13.4MB in size, suggesting it is once again a test. Rapid Security Response is an iOS 16 and macOS Ventura feature released as part of those updates.

Apple has also previously released ‌several iOS 16‌ Rapid Security Responses in a test capacity.

Article Link: Apple Releases Second Rapid Security Response Update for macOS Ventura 13.2 Beta

 

[Benjamin Nabulsi]

if it's rapid, why is it asking the user to install it? just install it already

 

[yellow8]

Great feature! I like that very much. Will make mac's globally more safe.

 

[zachz]

if it's rapid, why is it asking the user to install it? just install it already

I think it automatically installs upon restart if you have automatic security updates selected.

If not, I’d assume you’d have to manually select it like the photo shows

 

[Macintosh Quadra 840av]

I think it automatically installs upon restart if you have automatic security updates selected.

If not, I’d assume you’d have to manually select it like the photo shows

It won't do so in the beta. The intention being to actually test features. But yes, in the release version, if folks have auto updates on, it'll install it.

 

[gank41]

if it's rapid, why is it asking the user to install it? just install it already

Because it can be much worse to just restart your computer (cough cough Windows cough cough) while actively working within an application or saving documents as opposed to just delivering an update to you rapidly, and then telling you to restart.

 

[t0rqx]

Probably introducing a RSR+ subscription for Mac aka “Reel in Some more Revenue”.

 

[Realityck]

Small update (13.4 MB), immediately shut down Safari if running and restarted Mac after it was through.

13.2 beta 1 after 2nd rapid update = Safari Version 16.2 (18614.4.1)
13.2 beta 1 after 1st rapid update = Safari Version 16.2 (18614.4.1.500.1)
13.2 beta 1 = Safari Version 16.2 (18614.4.1)
13.1 RC = Safari Version 16.2 (18614.3.7.1.5)

Looks like a test just to see if could issue a rapid security release involving Safari versions. Note the toggling of safari versions.

They had to do it today because likely tomorrow Jan 10 they release the MacOS 13.2 beta 2 and likely updating to a Safari 16.3 release.

 

[skardvin]

Rapid security updates will hopefully lower the time that it took Apple in the past to patch vulnerabilities. Less time for attackers to attack should mean less chance of success for them.

 

[locoboi187]

Because it can be much worse to just restart your computer (cough cough Windows cough cough) while actively working within an application or saving documents as opposed to just delivering an update to you rapidly, and then telling you to restart.

Good thing it doesn't require a restart. So should be auto-installed.

 

[nt5672]

I don't want Apple installing anything on my computer unless I ok it. Why, because Apple software updates lately are not very reliable and I don't want to troubleshoot a bunch of problems right in the middle of having to deliver for my business.

 

[Realityck]

I don't want Apple installing anything on my computer unless I ok it. Why, because Apple software updates lately are not very reliable and I don't want to troubleshoot a bunch of problems right in the middle of having to deliver for my business.

Reference

Apple today released a second Rapid Security Response (RSR) update for the macOS Ventura 13.2 beta

Unless you are participating in the latest beta testing which this rapid response is applicable to only, you have nothing to worry about.

 

[symphony]

if it's rapid, why is it asking the user to install it? just install it already

Due to macOS Ventura 13.1’s bug, private Safari windows do not restore as intended after a reboot.

Therefore, I need time to quickly save my video links for later research purposes.

So good thing it isn’t automatic.

 

[Realityck]

Due to macOS Ventura 13.1’s bug, private Safari windows do not restore as intended after a reboot.

Therefore, I need time to quickly save my video links for later research purposes.

So good thing it isn’t automatic.

No recent MacOS patch is automatic, its needs your admin permission to run.

 

[ArtOfWarfare]

I don't want Apple installing anything on my computer unless I ok it. Why, because Apple software updates lately are not very reliable and I don't want to troubleshoot a bunch of problems right in the middle of having to deliver for my business.

As it's intended solely for security updates, the actual changes should be incredibly tiny (but important) bug fixes.

Stuff like, "When you see this unicode character, instead of crashing, display the unprintable character icon (that square thing)."

So long as your business doesn't depend on macOS crashing when it tries to render a character, you'll be fine.

The alternative to receiving such security fixes is that a malicious attacker spams you with an email with that character and crashes your mac. This exact thing has played out on iPhones twice now in the past decade (except it was texting, not email.)

 

[mhurron]

No recent MacOS patch is automatic, its needs your admin permission to run.

Depends on your settings, doesn't it

 

[Realityck]

Depends on your settings, doesn't it

View attachment 2139695

Its been a long time since I installed a public release, but all the many Ventura beta MacOS releases with everything enabled in the hierarchy you are looking at requires a admin password entered per dialog to execute, even if the update has been fully downloaded ready to run.

 

[brunerd]

Good thing it doesn't require a restart. So should be auto-installed.

Ah... but it does require a restart! This surprised me too.

The "rapid" part must be in the installation since it is 13.4MB big... but getting a user to close their browser to restart is where things quickly "de-rapidify" 😜 and yes it can try to install later tonight but a "dirty" close button can foil it. A user can open Terminal and open a new shell with `zsh` or `bash` and that'll stop it from restarting (and they can keep all their precious browser windows open)

 

[FoxBJK]

if it's rapid, why is it asking the user to install it? just install it already

In this context "rapid" just means "no reboot required". The kind of update you're thinking of would probably be called "emergency". Hopefully a much rarer occurrence.

 

[Realityck]

In this context "rapid" just means "no reboot required". The kind of update you're thinking of would probably be called "emergency". Hopefully a much rarer occurrence.

Both RSR's trials required a reboot.

 

[MrMacintoshBlog]

Both RSR's trials required a reboot.

I'm still trying to find out if one of the modes of the RSR can be safari only. Example = Webkit vulnerability gets an RSR but only requires the user to close and reopen safari. This line makes me think it might be possible

Rapid Security Responses that involve the operating system require the device to restart. Rapid Security Responses that involve Safari require the user to quit the app

 

[hagjohn]

This feature is long overdue.

 

[SoldOnApple]

> macOS Rapid Security Response 13.2 (b) is applied to the Mac automatically upon restart, and it is also added to Safari when the Safari app is exited and then reopened.

I restart my MacBook like twice a year and close Safari/Safari crashes only every few months. It would be nice if MacOS could nag us about these security updates needing to be installed.

 

[nicolas17]

I don't want Apple installing anything on my computer unless I ok it. Why, because Apple software updates lately are not very reliable and I don't want to troubleshoot a bunch of problems right in the middle of having to deliver for my business.

Then go to software update settings and make sure "install security updates" is disabled.

Note that Apple has never released one of these rapid security updates for a non-beta version yet, and I sure hope you're not "delivering for your business" on a macOS beta.

 

[mrr]

What about for people that are stuck on Monterey because Apple just obsoleted their still awesome 27” Retina iMac?