Important Security Update for Ventura and Monterey
This is an important security update that patches 2 known zero day vulnerabilities. Also of NOTE, Apple put this note on the 13.6 security update page
This means that Apple will be releasing more information on additional security vulnerabilities soon.
Kernel
Available for: macOS Ventura
Impact: A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
Description: The issue was addressed with improved checks.
CVE-2023-41992: Bill Marczak of The Citizen Lab at The University of Toronto’s Munk School and Maddie Stone of Google’s Threat Analysis Group
Security
Available for: macOS Ventura
Impact: A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
Description: A certificate validation issue was addressed.
CVE-2023-41991: Bill Marczak of The Citizen Lab at The University of Toronto’s Munk School and Maddie Stone of Google’s Threat Analysis Group
macOS Ventura 13.6 Security Update
Released September 21, 2023
My macOS Ventura 13.6 Update Video
macOS Ventura Patch Notes Summary
1. New Features – none
2. Bug fixes – none
4. Enterprise Changes – None
3. Security Fixes – 2
4. Safari Security (Webkit) – 0
5. Full installer and M1 IPSW – Full installer and M1/M2 IPSW restore file released!
6. OpenCore Legacy Patcher Users – OCLP 0.6.8 – Tested good on 2011 MBPro 15″ (Non Metal) & 2015 MacBook Pro 15″ (Metal GPU)
Full Apple Public Update Release list
macOS π» β
Ventura 13.6 (22G120)
Monterey – 12.7 (21G725)
Big Sur – None – Current =11.7.10 (20G1427)
Safari – 16.6 (Ventura not updated) 16.6.1 (Updated Monterey & Big Sur Only)
macOS Ventura 13.5.2 (22G91) Update is now Available!
UPDATED: 9/19/23
This article will be continually updated as new information comes in.
Apple just released macOS Ventura 13.5.2 to the public! Let’s jump in and find out what’s new in this update.
This is an important security update that patches a known zero day vulnerability called BLASTPASS. A zero day means the exploit was actively used before Apple was able to fix it and patch it with 13.5.2.
UPDATE #2
Citizenlab the group that reported the venerability to Apple says the exploit is an “NSO Group iPhone Zero-Click, Zero-Day Exploit” CVE-2023-41064 CVE-2023-41061
“Appleβs Security Engineering and Architecture team and Citizen Lab believe that Lockdown Mode blocks this particular attack.“
CIS has issued a Security Bulletin 2023-100 that discusses the CVE-2023-41064 venerability. The recommendation is to patch ASAP for large and medium companies.
Impact: Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Description: A buffer overflow issue was addressed with improved memory handling.
CVE-2023-41064: The Citizen Lab at The University of TorontoΚΌs Munk School
My macOS Ventura 13.5.2 Update Video!
macOS Ventura Patch Notes Summary
1. New Features – none
2. Bug fixes – none
4. Enterprise Changes – None
3. Security Fixes – 1
4. Safari Security (Webkit) – None
5. Full installer and M1 IPSW – Full installer and M1/M2 IPSW restore file released!
6. OpenCore Legacy Patcher Users – Testing in progress with OCLP 0.6.8
macOS Ventura 13.5 (22G74) Update is now Available!
UPDATED: 7/30/23
This article will be continually updated as new information comes in.
Apple just released macOS Ventura 13.5 to the public! Let’s jump in and find out what’s new in this update.
NOTE: All the security fixes in the 13.4.1 (c) RSR are included in the Ventura 13.5 Update.
Safari 16.6 is included in the Ventura 13.5 update and is available as a standalone update for macOS Monterey and Big Sur.
NOTE: Via Howard Oakley
“When Apple released the macOS Ventura 13.5 update, it was opaque about what it had changed, writing: βThis update provides important bug fixes and security updates and is recommended for all users.β Apart from Venturaβs security-only updates, this is the tersest and least informative of all its release notes for macOS 13. If the bug fixes were that important, why should we not have been told what had been fixed?
What hardly anyone noticed at that time was that among those unspecified bug fixes Apple had removed one of its most important privacy features: its Privacy & Security settings had lost all control over bundled and user-installed apps in Location Services”
5. Full installer and M1 IPSW -Both Released for macOS Ventura 13.5
6. OpenCore Legacy Patcher Users – Tested GOOD with a 11,5 2015 MacBook Pro 15″ with OCLP 0.6.7 NOTE!!! I did have some issues with Ventura 13.5 and OCLP 0.6.7 on my Non Metal 2011 MacBook Pro, I tested it again with a 2nd unit and had the same issues. I had to revert the patches in recovery. Will Update when I have more info.
OCLP UPDATE 7/30/23: Version 0.6.8 was released that fixes the issue!
my macOS Ventura 13.5 Update Video!
Full Apple Public Update Release list
macOS π» β
Ventura 13.5 (22F82)
Monterey 12.6.8 (21G725)
Big Sur 11.7.9 (20G1426)
Safari – 16.6 = standalone updates for macOS Monterey & Big Sur
macOS Ventura 13.4.1 (22F82) Update is now Available!
UPDATED: 7/11/23
This article will be continually updated as new information comes in.
Apple just released macOS Ventura 13.4.1 to the public! Let’s jump in and find out what’s new in this update.
UPDATE 7/11/23: Apple released a new macOS Ventura 13.4.1 (a) RSR update. Later in the afternoon, users started to report problems with the update. Apple ended up pulling the update late afternoon.
Apple updated the macOS Ventura 13.4.1 (a) & iOS 16.5.1 (a) security update pageπ
"Apple is aware of an issue where this Rapid Security Response might prevent some websites from displaying properly. Rapid Security Response 13.4.1 (b) will be available soon to address the issue" pic.twitter.com/5nexG9YJa6
Apple pulled the macOS Ventura 13.4.1 (a) RSR update due to problems.
The security updates released today address a serious Kernel & Webkit arbitrary code execution venerability that Apple says: “may have been actively exploited”.
I will update when Apple has released a fixed macOS Ventura 13.4.1 (b) RSR fixed update.
CVE-2023-32434 – Kernel
CVE-2023-32439 – Webkit
Kernel vulnerabilities can not be patched by Rapid Security Response
Safari 16.5.1 is included in the Ventura 13.4.1 update and is available as a standalone update for macOS Monterey and Big Sur.
UPDATE! Apple deprecated the old Safari 16.5.1 update and uploaded a new version for both Monterey & Big Sur.
macOS Ventura Patch Notes Summary
1. New Features – 0
2. Bug fixes – 0
4. Enterprise Changes – 0
3. Security Fixes – 1
4. Safari – 1 (Webkit)
5. Full installer and M1 IPSW -Both Released for macOS Ventura 13.4.1
6. OpenCore Legacy Patcher Users – Testing with OCLP 0.6.7 NOTE: had a few issues on my 2011 15″ MacBook Pro. Investigating now to see if it is only on my machine.
Full Apple Public Update Release list
macOS π» β
Ventura 13.4.1 (22F82)
Monterey 12.6.7 (21G651)
Big Sur 11.7.8 (20G1351)
Safari – 16.5.1 = standalone updates for macOS Monterey & Big Sur
Download Sonoma Full Installer – Public & Beta Versions.
This database will contain download links for macOS Sonoma 14 full Installer pkg files (InstallAssistant.pkg). This file is the same full installer that you would download directly from the App Store for Intel and Apple Silicon M1 Mac Computers. The InstallAssistant.pkg is stored on Apple’s servers and contains the full “Install macOS.app”. Once downloaded, all you need to do is install the pkg and the full installer of macOS will be in your applications folder. This change was made when Apple revised the full installer for Big Sur. The InstallAssistant.pkg is not available for Catalina or Mojave.
UPDATED: 09/14/26
NOTE: I hate website ads, but this one small google ad below helps me with the cost of running Mr. Macintosh.com. Thank you!
NOTE:Depending on the browser you are using, you might need to right click and select “Copy link address”. Past this link into a new tab and it should start to download.
This article will be continually updated as new information comes in.
Apple just released macOS Ventura 13.3.1 to the public! This update was a surprise update and includes bug fixes and important security updates.
UPDATE 4/10/23: Apple has released both macOS Monterey 12.6.5 and Big Sur 11.7.6 to patch CVE-2023-28206! Everyone should take note that this is an important patch and should plan to update as soon as possible.
The Ventura 13.3 update is being called an “Emergency Update” by one of the security researchers at the Amnesty International Security Lab.
Super proud of our team at @AmnestyTech and everyone who helped in this investigation.
Today, Apple published an emergency update for all iPhones to patch an exploit chain which we, together with @_clem1 (Google TAG) discovered in the wild. pic.twitter.com/KLMYjqi3lK
