BridgeOS / iBridge Archives - Page 4 of 5

What’s New in the macOS Catalina 10.15.5 Update 19F96?

MrMacintosh.com - macOS Catalina 10.15.5 (19F96) Update — *macOS Catalina 10.15.5 (19F96) Update*

The macOS Catalina 10.15.5 Update 19F96 is now Available.

The much anticipated macOS Catalina 10.15.5 update is live! The update is now available for download as a full installer.app, delta and combo update. This update looks like it includes a fix for the MacBook Pro 16″ wake from sleep Kernel Panic Issue! Let’s take a look at the Catalina 10.15.5 Update 19F96 to find out what’s new. The update also includes a fix for the GPU Freezing issue with some Macs with an Intel Only Graphics Chip.

UPDATE 06/02/20 – Apple just released a 10.15.5 Supplemental Update. I have the info here – https://mrmacintosh.com/macos-catalina-10-15-5-supplemental-update-19f101-cve-2020-9859/

UPDATE 05/27/20 – I wrote an article on the changes to the softwareupdate --ignoreflag and what it means for MacAdmins. mrmacintosh.com/10-15-5-2020-003-updates-changes-to-softwareupdate-ignore/

10.15.5 Patch Notes Summary

2 Announcements
3 New Features
8 Resolved Issues
5 Enterprise Fixes
41 Security Fixes

Apple’s Public Patch Notes / Release Notes Documentation

NOTE: Apple Documentation takes a little while to show up online after release. I will update when the new articles are made available.

https://support.apple.com/en-us/HT210642

developer.apple.com/documentation/macos_release_notes

developer.apple.com/documentation/macos_release_notes/macos_catalina_10_15_5_release_notes

For more detailed information about this update and previous updates, please visit: https://support.apple.com/kb/HT210642

Previous 10.15 Releases + Previous Patch Notes

10. 10.15.5 = (19F96) May 26, 2020
9. 10.15.4 = (19E287) April 8th, 2020
8. 10.15.4 = (19E266) March 24th 2020
7. 10.15.3 = (19D76) January 28th 2020
6. 10.15.2 = (19C57) December 10th 2019
5. 10.15.1 = (19B2106) November 13th 2019
4. 10.15.1 = (19B88) October 29th 2019
3. 10.15.0 = (19A603) October 21st 2019
2. 10.15.0 = (19A602) October 15th 2019
1. 10.15.0 = (19A583) October 7th 2019

Catalina 10.15.5 Info & Download Links

Delta Update

The “Delta” update is smaller in size because it only includes fixes for the previous point release only.

Download Link – https://support.apple.com/kb/DL2039

Size = 2.98 GB

Product ID = 061-78581

Requirements = 10.15.4

Combo Update

The “Combo” update is for all previous versions of Catalina.

Download Link – https://support.apple.com/kb/DL2040

Size = 4.76 GB

Product ID = 061-78580

Requirements = 10.15.0, 10.15.1, 10.15.2, 10.15.3 or 10.15.4

Full Installer.app

Link – Catalina 10.15.5 Mac App Store

Size = 8.73 GB

Product ID = 061-78580

Requirements – 10.15 Catalina Requirements

T2 BridgeOS Update

T2 BridgeOS was updated along with the 10.15.5 update.

Size = 392.8 MB

Product ID = 061-70034

BridgeOS Update Version = 17.16.15290

Security Content for Safari 13.1.1

https://support.apple.com/en-us/HT211177

New Apple Support Documents

Adapters for the Thunderbolt 3 or USB-C port on your Mac or iPad Pro

If the cable from your external device doesn’t connect to the Thunderbolt 3 or USB-C port on your Mac or iPad Pro, you might need an adapter.

https://support.apple.com/en-us/HT207443

About Mac notebook batteries

Learn how to optimize the life of the battery in your Mac notebook, fix battery issues, and get service.

https://support.apple.com/en-us/HT204054

Catalina 10.15.5 Update 19F96 Overview

https://support.apple.com/en-us/HT210642

macOS Catalina 10.15.5 introduces battery health management in the Energy Saver settings for notebooks, an option to control automatic prominence of video tiles on Group FaceTime calls, and controls to fine-tune the built-in calibration of your Pro Display XDR. The update also improves the stability, reliability, and security of your Mac.

Battery Health Management

Battery health management to help maximize battery lifespan for Mac notebooks
Energy Saver preference pane now displays battery condition and recommends if the battery needs to be serviced
Option to disable battery health management

For more information, please visit https://support.apple.com/kb/HT211094

FaceTime Prominence Preference

Option to control automatic prominence on Group FaceTime calls so video tiles do not change size when a participant speaks

Calibration Fine-Tuning for Pro Display XDR

Controls to fine-tune the built-in calibration of your Pro Display XDR by adjusting the white point and luminance for a precise match to your own display calibration target

This update also includes bug fixes and other improvements.

Fixes an issue that may prevent Reminders from sending notifications for recurring reminders
Addresses an issue that may prevent password entry on the login screen
Fixes an issue where System Preferences would continue to show a notification badge even after installing an update
Resolves an issue where the built-in camera may not be detected when trying to use it after using a video conferencing app
Addresses an issue for Mac computers with the Apple T2 Security Chip where internal speakers may not appear as a sound output device in Sound preferences
Fixes a stability issue with uploading and downloading media files from iCloud Photo Library while your Mac is asleep
Resolves a stability issue when transferring large amounts of data to RAID volumes
Fixes an issue where the Reduce Motion Accessibility preference did not reduce the speed of animations in a FaceTime group call

Enterprise Fixes

Improves performance on certain Mac models when enabling hardware acceleration in GPU-intensive apps such as those used for video conferencing.
Addresses an issue where Microsoft Exchange accounts were unable to sign in during account setup when using Conditional Access.
Resolves an issue that prevented some displays connected to MacBook Pro (16-inch, 2019) from waking from sleep when the Mac wakes
Single sign-on (SSO) works immediately after installing an app that contains a third party SSO extension.
Apple Push Notification Service traffic now uses a web proxy when specified in a PAC file via the Proxies payload

Announcements

Software Update
For increased security, major releases of macOS are not hidden when using the --ignore flag and the softwareupdate command starting with macOS 10.15.5. A major release is defined as one which receives a name, such as macOS Catalina.
Starting with macOS 10.15.4, major releases of macOS can be deferred for up to 90 days using MDM.

More on this here – mrmacintosh.com/10-15-5-2020-003-updates-changes-to-softwareupdate-ignore/

networksetup Command
Starting with macOS 10.15.5, the networksetup command behaves differently when run as a standard user versus an admin user. Standard users can do the following:
• 1. Read various network settings
• 2. Turn Wi-Fi power on or off (networksetup -setairportpower en0 on)
• 3. Change the Wi-Fi access point (networksetup -setairportnetwork en0
ExampleWiFiAP)
Other network settings can no longer be modified by standard users via networksetup.
For admin users, networksetup will continue to behave as it has in previous releases of macOS, provided System Preferences > Security & Privacy > Advanced… > “Require an administrator password to access system-wide preferences” is unchecked (which is the default state). If it is checked, admins will be bound by the same constraints as standard users when
using networksetup.

Security Content for 10.15.5

https://support.apple.com/en-us/HT211170

Catalina 10.15.5 Update 19F96

10.15.4 Supplemental Update Bricking Small Number of T2 Macs

Did you Install the 10.15.4 Supplemental Update on your T2 Mac, only to find that it will not power up after the Install?

When reporting on issues, I always try to quantify the issue in terms of how many users could be affected. In this particular case, the numbers are very low. This article is to help you rescue your Mac. The issue only affects T2 Macs that have installed the 10.15.4 Supplemental Update. The amount of users reporting this is very small, but the problem can be devastating if the user does not understand what happened or how to fix it.

This issue is similar to the 2019-001 Security Update last November that cause Data loss. The Reports are very close as it was first thought that the problem was the users fault for shutting down the Mac during the BridgeOS update.

What actually happened was, the BridgeOS Update Failed and destroyed the encryption keys.

mrmacintosh.com/mojave-2019-001-security-update-causing-data-loss-if-interrupted/

1. Affected Mac Models
2. Affected OS Versions
3. Problem: 10.15.4 Supplemental BridgeOS Update
4. Problem Description
5. Can the dead Mac be brought back to life? YES!
6. Why write about something that affects such a small number of Macs?
7. Wait a few days before installing updates.
8. Should I block the 10.15.4 Supplemental Update?
9. Does Apple Know about this issue and are they working on a fix?
10. Links
11. Credit & Hat Tips

1. Affected Mac Models

This issue covers almost every single T2 Mac Model. I have not seen any reports of this happening to the iMac Pro 2017 or the Mac Pro 2019.

1. MacBook Pro 16′ 2019
2. MacBook Pro 13″ & 15″ 2018-2019
3. MacBook Air 2018-2020
4. Mac Mini 2018

2. Affected OS Versions

This issue affects only one macOS update.

macOS Catalina 10.15.4 Supplemental Update (19E287) Released 4/8/20

3. Problem: 10.15.4 Supplemental Update Bricked

One of the very first reports was in a MacAdmins Channel. The report said that the user called the helpdesk saying the update hung. Now the Mac does not power on.

Another report from a user with a 2018 13″ MacBook Pro

I attempted to install the update but about halfway through my computer shutdown and it bricked my 2018 13 inch MacBook. No power, no fans coming on and off or anything when pressing and holding the power button.

Another Report from a 16″ Macbook Pro 2019 User.

Confirmed; this is what happened to my 16″ after this install. I needed to do a DFU restore (using Apple Configurator 2 — you can download it to your hopefully spare MacBook from the app store) to get my mac back up and running. Unfortunately, for some reason, after the DFU restore, my 16″ came back up to do a full reinstall, and I had to restore my files from backup.

One More report form a 13″ MacBook Pro User

Anyone else do the recent 10.15.4 update and have their machine completely bricked? Mine will not turn on…not after resetting the SMB…not at all. Apple’s update appears to have completely killed my macbook. It’s now completely unresponsive.

Macbook Air 2018 User

Thursday evening my wife’s Air still showed the update in System Prefs and clicked to install it. She said the dialog box said it was normal for the screen to go black, but it didn’t say it’d never come back!!! Her less than 18 month old Air is now officially bricked. Unresponsive to all attempts to remind it of its mission on earth. A stellar machine until that fateful click.

4. Problem Description

Apple’s T2 Security chip runs software called BridgeOS. That software is updated each time you install a Catalina Update or Security Update. The T2 controls many aspects of your Mac.

The Apple T2 Security Chip is Apple’s second-generation, custom silicon for Mac. By redesigning and integrating several controllers found in other Mac computers—such as the System Management Controller, image signal processor, audio controller, and SSD controller—the T2 chip delivers new capabilities to your Mac
Apple.com HT208862

If the update to BridgeOS fails, it can prevent your Mac from booting. This exactly what happened to some users.

You can read more about the T2 Security Chip from the links below.

support.apple.com/en-us/HT208862

apple.com/euro/mac/shared/docs/Apple_T2_Security_Chip_Overview.pdf

michaellynn.github.io/2018/07/27/booting-secure/

After reading through a bunch of reports the problem seems happen during the BridgeOS Update phase. Most users say that all they saw was a black screen and the Mac was unresponsive. From the users who contacted me over email, after the update failed the Mac was already be in DFU mode. A few users stated that as soon as they connected the dead Mac to a host mac with Apple Configuartor 2 running, it immediately showed up in RECOVERY Mode.

5. Can the dead Mac be brought back to life? YES!

In almost every case, a DFU Mode BridgeOS Reinstall brought these dead Macs back to life!

I wrote a detailed article on how to perform the restore below.

mrmacintosh.com/how-to-restore-bridgeos-on-a-t2-mac-how-to-put-a-mac-into-dfu-mode/

I knew something was up on April 10th two days after the supplemental update was released. I noticed a spike in traffic to my BridgeOS Restore article. Emails and comments started to roll in. They all mentioned that they found the article after the 10.15.4 Supplemental Update bricked their Mac.

6. Why write about something that affects such a small number of Macs?

Like I mentioned at the top of this article, I usually will only report on issues that affect a large number of Mac Users. The idea is that small fluke type issues happen all the time. Usually the user can just reinstall macOS and be up and running.

This case was different. I decided to write this article after reading some of the stories.

Haven’t talked with Apple’s help team since 2004—today we spent 2 hours on the phone—we tried every method to get my bricked 2018 15” MacBook Pro to boot. Hopefully this issue is a small epidemic and not a pandemic; the MBP became unresponsive today while updating to 10.15.4. The last thing I saw before the MBP went quiet and the screen went black was, “about 14 minutes remaining”. Apple Help quoted $815 to ship it to them for a diagnostic and repair. I explained it was working perfectly well before the update—CSR elevated it to a senior who is starting with a new charger and cable.

Here is another direct quote from a 2018 Mac Mini User that I found tonight.

Any one else experienced this problem? Mac mini late 2018. Update went through, restarted Mac and now bricked. Will not turn on at all. Took it to Apple store and they say main board needs replacing at cost of 400usd.

I hope this article finds you mattoneill2! ^

If this article can save just a few Mac Users from having to spend $$$ for a repair, then it was definitely worth it.

7. Wait a few days before installing updates.

A good tip for you is to just wait a few days for the dust to settle before installing updates.

This is not the first time Apple has pulled an update. They pulled High Sierra and Sierra 2019-002 Security Update this past March. It’s a good idea to wait at least a few days before you update.

mrmacintosh.com/apple-replaces-2019-002-security-updates-for-10-13-and-10-12-bridgeos-updates-also-show-as-new/

Another example is the GPU Freezing Issue that I noted above

mrmacintosh.com/2020-002-update-causes-some-macs-to-freeze-when-using-video-conf-apps/

8. Should I block the 10.15.4 Supplemental Update?

Maybe

The only reason I say maybe, is that the supplemental update does not include any Security Related fixes. Take a look at the list below.

Fixes an issue where Mac computers running macOS Catalina 10.15.4 could not participate in FaceTime calls with devices running iOS 9.3.6 and earlier or OS X El Capitan 10.11.6 and earlier
Resolves an issue where you may repeatedly receive a password prompt for an Office 365 account
Fixes an issue where MacBook Air (Retina, 13-inch, 2020) may hang in Setup Assistant or when disconnecting and reconnecting a 4K or 5K external display
Resolves an issue where a USB-C port in your Mac may become unresponsive

If you need any of the above fixes, then I would say deploy it. The risk is really low.

9. Does Apple Know about this issue? Are they working on a fix?

Unlike the GPU freezing issue or the Wake from Sleep issue, I do not have any information.

10. Links

Apple Support Forum

MacRumors.com

Reddit.com

HackerNews

https://news.ycombinator.com/item?id=22845629

11. Credits – Hat Tips

MrMacintosh Readers who posted comments and emailed me about this issue.

10.15.4 Supplemental Update Bricked

Catalina 10.15.4 Supplemental Update (19E287) Released!

Apple Today Released macOS Catalina 10.15.4 Supplemental Update (19E287)

UPDATE 4/24/20: Another issue found. On some Macs, the ComputerName and HostNames are being reset to default after installing the Supplemental update.

mrmacintosh.com/10-15-4-supplemental-update-resets-computername-hostname-to-default

UPDATE 04/10/20: I have noticed increased traffic to my Mac BridgeOS DFU Restore Article. I looked around a bit found a small number of reports that the 10.15.4 Supplemental Update is Bricking T2 Macs. To the user the Mac seems dead. I had 3 different reports sent to me and found 3 other report posts. The good news is, a BridgeOS restore was able to bring some of the Macs back to life.

mrmacintosh.com/10-15-4-supplemental-update-bricking-small-number-of-t2-macs/

In a surprise today, Apple released a new Supplemental update for macOS Catalina 10.15.4. This update weighs in at 1.01gb and is available now for all 10.15.4 Catalina users. This update looks to fix 4 different issues. Apple also updated BridgeOS and re released a new installer.app, combo update and delta update.

The Catalina 10.15.4 Supplemental Update Includes the following fixes.

macOS Catalina 10.15.4 supplemental update improves the stability and security of your Mac.

Fixes an issue where Mac computers running macOS Catalina 10.15.4 could not participate in FaceTime calls with devices running iOS 9.3.6 and earlier or OS X El Capitan 10.11.6 and earlier
Resolves an issue where you may repeatedly receive a password prompt for an Office 365 account
Fixes an issue where MacBook Air (Retina, 13-inch, 2020) may hang in Setup Assistant or when disconnecting and reconnecting a 4K or 5K external display
Resolves an issue where a USB-C port in your Mac may become unresponsive

BridgeOS update

The T2 BridgeOS was updated in this macOS Catalina Supplemental Update.

T2 BridgeOS Version = 17.16.14281

Current and Previous Build Versions of 10.15

10.15.4 = (19E287) April 8th, 2020 = Current Release
10.15.4 = (19E266) March 24th 2020
10.15.3 = (19D76) January 28th 2020
10.15.2 = (19C57) December 10th 2019
10.15.1 = (19B2106) November 13th 2019
10.15.1 = (19B88) October 29th 2019
10.15.0 = (19A603) October 21st 2019
10.15.0 = (19A602) October 15th 2019
10.15.0 = (19A583) October 7th 2019

Links – Supplemental Update + Combo & Delta

Supplemental Update =

Size = 1.02gb

https://support.apple.com/kb/DL2038

Delta Update =

Size = 3.0gb

https://support.apple.com/kb/DL2036

Combo Update =

Size = 4.73gb

https://support.apple.com/kb/DL2037

If I deployed/cached the old 10.15.4 Installer.app for OS Upgrades, do I need to redeploy?

Do I have to replace my deployable 10.15 Installer.app? – Yes

If you deployed the old version of the 10.15.4 (19E266) Installer, you should update it to the new (19E287). If you don’t your users will have to install the New Catalina Supplemental Update after installing or upgrading.

Security Content

The Supplemental Update does not list any Published CVE entries.

MacOS Security Updates – Mojave 2020-002 & High Sierra 2020-002

MrMacintosh.com - MacOS Mojave Security Update 2020-002 (18G4032), High Sierra Security Update 2020-002 (17G12034) and Safari 13.1. Security Notes, Download Links & more! — The Security Update 2020-002 for Mojave and High Sierra is now available.

Security Updates for macOS 10.14 & 10.13 are now Available.

Today, Apple released macOS Mojave Security Update 2020-002 and High Sierra Security Update 2020-002. Below you will find Build Versions, Download Links, Update Sizes and previous Security Update Links. MacOS Sierra is no longer supported by Apple for Security Updates.

How do I keep track of all the macOS Build Versions?

I document all of the macOS Build Versions like the latest Mojave 2020-002 High Sierra 2020-002 along with most Apple Applications, XProtect, Gatekeeper and MRT updates in one database. You can check out the link below.

mrmacintosh.com/macos-system-status-version-info-for-macadmins/

MacOS Mojave Security Update 2020-002 (18G4032)

macOS Mojave Security Update 2020-002
Size = 1.62gb
Package Download and Information Link
https://support.apple.com/kb/DL2035

Information on the Security fixes included in the 2020-002 Mojave Security Update

https://support.apple.com/en-us/HT211100

MacOS High Sierra Security Update 2020-002 (17G12034)

10.13.6 High Sierra Security Update 2020-002
Size = 2.1gb
Package Download and Information Link
https://support.apple.com/kb/DL2034

Information on the Security fixes included in the 2020-002 High Sierra Security Update

https://support.apple.com/en-us/HT211100

Safari Update

Safari was updated to version 13.1

Download Size for High Sierra = 66.2mb

Downloads Size for Mojave = 70.5mb

T2 BridgeOS Update

Both the 2020-002 and 2020-002 Security Updates upgrade BridgeOS to version – 17.16.14263

Security Content for Safari 13.1

https://support.apple.com/en-us/HT211104

Previous Releases

Security Related Content for 2020-002

Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra

Released March 24, 2020

AppleGraphicsControl

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.3

Impact: A malicious application may be able to execute arbitrary code with kernel privileges

Description: Multiple memory corruption issues were addressed with improved state management.

CVE-2020-3904: Proteas of Qihoo 360 Nirvan Team

Bluetooth

Available for: macOS Mojave 10.14.6, macOS High Sierra 10.13.6, macOS Catalina 10.15.3

Impact: A local user may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2020-3907: Yu Wang of Didi Research America

CVE-2020-3908: Yu Wang of Didi Research America

CVE-2020-3912: Yu Wang of Didi Research America

Bluetooth

Available for: macOS Mojave 10.14.6, macOS High Sierra 10.13.6, macOS Catalina 10.15.3

Impact: A malicious application may be able to execute arbitrary code with kernel privileges

Description: A memory corruption issue was addressed with improved input validation.

CVE-2020-3892: Yu Wang of Didi Research America

CVE-2020-3893: Yu Wang of Didi Research America

CVE-2020-3905: Yu Wang of Didi Research America

Bluetooth

Available for: macOS Mojave 10.14.6, macOS High Sierra 10.13.6

Impact: An application may be able to read restricted memory

Description: A validation issue was addressed with improved input sanitization.

CVE-2019-8853: Jianjun Dai of Qihoo 360 Alpha Lab

IOHIDFamily

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.3

Impact: A malicious application may be able to execute arbitrary code with kernel privileges

Description: A memory initialization issue was addressed with improved memory handling.

CVE-2020-3919: an anonymous researcher

IOThunderboltFamily

Available for: macOS Mojave 10.14.6, macOS High Sierra 10.13.6

Impact: An application may be able to gain elevated privileges

Description: A use after free issue was addressed with improved memory management.

CVE-2020-3851: Xiaolong Bai and Min (Spark) Zheng of Alibaba Inc. and Luyi Xing of Indiana University Bloomington

Kernel

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.3

Impact: An application may be able to read restricted memory

Description: A memory initialization issue was addressed with improved memory handling.

CVE-2020-3914: pattern-f (@pattern_F_) of WaCai

libxml2

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.3

Impact: Multiple issues in libxml2

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2020-3909: LGTM.com

CVE-2020-3911: found by OSS-Fuzz

libxml2

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.3

Impact: Multiple issues in libxml2

Description: A buffer overflow was addressed with improved size validation.

CVE-2020-3910: LGTM.com

Mail

Available for: macOS High Sierra 10.13.6, macOS Catalina 10.15.3

Impact: A remote attacker may be able to cause arbitrary javascript code execution

Description: An injection issue was addressed with improved validation.

CVE-2020-3884: Apple

TCC

Available for: macOS Mojave 10.14.6, macOS Catalina 10.15.3

Impact: A maliciously crafted application may be able to bypass code signing enforcement

Description: A logic issue was addressed with improved restrictions.

CVE-2020-3906: Patrick Wardle of Jamf

Mojave 2020-002 High Sierra 2020-002

What’s New in the macOS Catalina 10.15.4 Update (19E266)?

MrMacintosh.com - Today Apple released the macOS Catalina 10.15.4 Update (19E266). What's New? 12 New Features, 7 Resolved Issues, 20 Security Fixes & 7 Enterprise Fixes! — The macOS Catalina 10.15.4 Update is now available.

macOS Catalina 10.15.4 Update (19E266) is now Available.

10.15.4 is Catalina’s forth update, which is sometimes called the “Spring Release Update” is live! MacOS Catalina 10.15.4 is now available for download as a full installer.app, delta and combo update. Let’s take a look at the Catalina 10.15.4 Update (19E266) to see what’s new.

UPDATED: 03/26/20

10.15.4 Patch Notes Summary

12 New Features
7 Resolved Issues
20 Security Fixes
7 Enterprise Content Fixes

Apple’s Public Patch Notes / Release Notes Documentation

NOTE: Apple Documentation takes a bit to come online, I will update when the articles are posted.

developer.apple.com/documentation/macos_release_notes

developer.apple.com/documentation/macos_release_notes/macos_catalina_10_15_4_release_notes

For more detailed information about this update and previous updates, please visit: https://support.apple.com/kb/HT210642

Previous 10.15 Releases + Previous Patch Notes

10.15.4 = (19E266) March 24th 2020 = Current Release
10.15.3 = (19D76) January 28th 2020
10.15.2 = (19C57) December 10th 2019
10.15.1 = (19B2106) November 13th 2019
10.15.1 = (19B88) October 29th 2019
10.15.0 = (19A603) October 21st 2019
10.15.0 = (19A602) October 15th 2019
10.15.0 = (19A583) October 7th 2019

Catalina 10.15.4 Info & Download Links

Delta Update

Link – https://support.apple.com/kb/DL2036

Size = 2.97gb

Product ID = 061-72538

Requirements = 10.15.3

Combo Update

Link – https://support.apple.com/kb/DL2037

Size = 4.68gb

Product ID = 061-72538

Requirements = 10.15.0, 10.15.1, 10.15.2 or 10.15.3

Full Installer.app

Link – Catalina 10.15.4 Mac App Store

Size = 8.73gb

Product ID = 041-40615

Requirements – 10.15 Catalina Requirements

T2 BridgeOS Update

T2 BridgeOS was updated along with the 10.15.4 update.

BridgeOS Update = 17.16.14263

Security Content for Safari 13.1

https://support.apple.com/en-us/HT211104

New Apple Support Documents

About legacy system extensions in macOS Catalina

Some system extensions will not be compatible with a future version of macOS.

https://support.apple.com/en-us/HT210999

Prepare your Apple devices for working remotely

IT leaders can set up devices for team members to work remotely or from home.

https://support.apple.com/en-us/HT211111

Share folders with iCloud Drive

With folder sharing in iCloud Drive, you can share entire folders of files with friends, family, or colleagues. Then, you can work together on your iPhone, iPad, iPod touch, Mac, or iCloud.com.

https://support.apple.com/en-us/HT210910

If you use smart card to log in to your Mac and reset your Active Directory password from another computer

If you reset your Active Directory password from another computer and use smart card and FileVault, learn how to log in to your Mac in macOS Catalina 10.15.4 or later.

https://support.apple.com/en-us/HT211079

If Boot Camp Assistant says that your disk could not be partitioned

Boot Camp Assistant might say that an error occurred while partitioning the disk for Windows.

https://support.apple.com/en-us/HT209102

UPDATED:

If your Mac starts up to an Apple logo or progress bar

Your Mac shows an Apple logo when it finds your local startup disk, then shows a progress bar as the macOS startup or installation process continues.

https://support.apple.com/en-us/HT207019

If your macOS and iOS clients aren’t getting Apple push notifications

Learn what to do if your macOS and iOS clients don’t see Apple push notifications when connected to a network.

https://support.apple.com/en-us/HT203609

Use Apple products on enterprise networks

Learn which hosts and ports are required to use your Apple products on enterprise networks.

https://support.apple.com/en-us/HT210060

Catalina 10.15.4 Update (19E266) Overview

macOS Catalina 10.15.4 introduces iCloud Drive folder sharing, Screen Time communication limits, Apple Music time-synced lyrics view, and more. The update also improves the stability, reliability, and security of your Mac.

Finder

iCloud Drive folder sharing from Finder
Controls to limit access only to people you explicitly invite, or to grant access to anyone with the folder link
Permissions to choose who can make changes and upload files, and who can only view and download files

Screen Time

Communication limits for controlling who your children can communicate with and be contacted by throughout the day and during downtime
Playback control of music videos for your children

Music

Time-synced lyrics view for Apple Music, including the ability to jump to your favorite part of a song by clicking a line in lyrics view

Safari

Option to import Chrome passwords into your iCloud Keychain for easy AutoFill of your passwords in Safari and across all your devices
Controls for duplicating a tab and for closing all tabs to the right of the current tab
HDR playback support on compatible computers for Netflix content

App Store with Apple Arcade

Universal Purchase support enables the use of a singular purchase of a participating app across iPhone, iPod touch, iPad, Mac, and Apple TV

Pro Display XDR

Customized reference modes that you can tailor to specific workflow needs by selecting from several color gamut, white point, luminance, and transfer function options

Accessibility

Head pointer preference for moving a cursor on the screen based on the precise movements of your head

This update also includes bug fixes and other improvements:

High Dynamic Range output to HDR10-compatible third-party displays and TVs connected with DisplayPort or HDMI
OAuth authentication support with Outlook.com accounts for improved security
CalDav migration support when upgrading to iCloud reminders on a secondary device
Addresses an issue where text copied between apps may appear invisible when Dark Mode is active
Resolves an issue in Safari where a CAPTCHA tile may display incorrectly
Fixes an issue where you may receive notifications for updated or completed reminders
Fixes an issue with screen brightness for the LG UltraFine 5K display after waking from sleep

Enterprise content:

Apple Push Notification Service traffic now uses a web proxy when specified in a PAC file
Resolves an issue where updating the login keychain password after resetting a user password would cause a new keychain to be created
After enabling ”Search directory services for certificates” in Keychain Access preferences, searching by email address in Keychain Access or Mail now locates a user certificate stored in directory services
When setting the DisableFDEAutoLogin key in com.apple.loginwindow, you can now sync your FileVault password with the Active Directory user password after updating the user password
Reinstates the ability to update or restore iOS, iPadOS, or tvOS devices by dragging .ipsw files to the device in an Apple Configurator 2 window
Addresses an issue where sending the EraseDevice MDM command might not cause the device to be erased
When logging in as an Active Directory user after using deferred FileVault enablement, the user is now prompted for their password to enable FileVault

Some features may not be available for all regions, or on all Apple devices.

Security Content for 10.15.4

https://support.apple.com/en-us/HT211100

NOTE: Listed below are only security fixes for 10.15, fixes for 10.13 and 10.14 are listed in my 2020-002 security update article.

Apple HSSPI Support

Available for: macOS Catalina 10.15.3

Impact: An application may be able to execute arbitrary code with system privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2020-3903: Proteas of Qihoo 360 Nirvan Team

AppleGraphicsControl

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.3

Impact: A malicious application may be able to execute arbitrary code with kernel privileges

Description: Multiple memory corruption issues were addressed with improved state management.

CVE-2020-3904: Proteas of Qihoo 360 Nirvan Team

AppleMobileFileIntegrity

Available for: macOS Catalina 10.15.3

Impact: An application may be able to use arbitrary entitlements

Description: This issue was addressed with improved checks.

CVE-2020-3883: Linus Henze (pinauten.de)

Bluetooth

Available for: macOS Mojave 10.14.6, macOS High Sierra 10.13.6, macOS Catalina 10.15.3

Impact: A local user may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2020-3907: Yu Wang of Didi Research America

CVE-2020-3908: Yu Wang of Didi Research America

CVE-2020-3912: Yu Wang of Didi Research America

Bluetooth

Available for: macOS Mojave 10.14.6, macOS High Sierra 10.13.6, macOS Catalina 10.15.3

Impact: A malicious application may be able to execute arbitrary code with kernel privileges

Description: A memory corruption issue was addressed with improved input validation.

CVE-2020-3892: Yu Wang of Didi Research America

CVE-2020-3893: Yu Wang of Didi Research America

CVE-2020-3905: Yu Wang of Didi Research America

Call History

Available for: macOS Catalina 10.15.3

Impact: A malicious application may be able to access a user’s call history

Description: This issue was addressed with a new entitlement.

CVE-2020-9776: Benjamin Randazzo (@____benjamin)

CoreFoundation

Available for: macOS Catalina 10.15.3

Impact: A malicious application may be able to elevate privileges

Description: A permissions issue existed. This issue was addressed with improved permission validation.

CVE-2020-3913: Timo Christ of Avira Operations GmbH & Co. KG

FaceTime

Available for: macOS Catalina 10.15.3

Impact: A local user may be able to view sensitive user information

Description: A logic issue was addressed with improved state management.

CVE-2020-3881: Yuval Ron, Amichai Shulman and Eli Biham of Technion – Israel Institute of Technology

Icons

Available for: macOS Catalina 10.15.3

Impact: A malicious application may be able to identify what other applications a user has installed

Description: The issue was addressed with improved handling of icon caches.

CVE-2020-9773: Chilik Tamir of Zimperium zLabs

Intel Graphics Driver

Available for: macOS Catalina 10.15.3

Impact: A malicious application may disclose restricted memory

Description: An information disclosure issue was addressed with improved state management.

CVE-2019-14615: Wenjian HE of Hong Kong University of Science and Technology, Wei Zhang of Hong Kong University of Science and Technology, Sharad Sinha of Indian Institute of Technology Goa, and Sanjeev Das of University of North Carolina

IOHIDFamily

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.3

Impact: A malicious application may be able to execute arbitrary code with kernel privileges

Description: A memory initialization issue was addressed with improved memory handling.

CVE-2020-3919: an anonymous researcher

Kernel

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.3

Impact: An application may be able to read restricted memory

Description: A memory initialization issue was addressed with improved memory handling.

CVE-2020-3914: pattern-f (@pattern_F_) of WaCai

Kernel

Available for: macOS Catalina 10.15.3

Impact: A malicious application may be able to execute arbitrary code with kernel privileges

Description: Multiple memory corruption issues were addressed with improved state management.

CVE-2020-9785: Proteas of Qihoo 360 Nirvan Team

libxml2

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.3

Impact: Multiple issues in libxml2

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2020-3909: LGTM.com

CVE-2020-3911: found by OSS-Fuzz

libxml2

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.3

Impact: Multiple issues in libxml2

Description: A buffer overflow was addressed with improved size validation.

CVE-2020-3910: LGTM.com

Mail

Available for: macOS High Sierra 10.13.6, macOS Catalina 10.15.3

Impact: A remote attacker may be able to cause arbitrary javascript code execution

Description: An injection issue was addressed with improved validation.

CVE-2020-3884: Apple

sudo

Available for: macOS Catalina 10.15.3

Impact: An attacker may be able to run commands as a non-existent user

Description: This issue was addressed by updating to sudo version 1.8.31.

CVE-2019-19232

TCC

Available for: macOS Mojave 10.14.6, macOS Catalina 10.15.3

Impact: A maliciously crafted application may be able to bypass code signing enforcement

Description: A logic issue was addressed with improved restrictions.

CVE-2020-3906: Patrick Wardle of Jamf

Time Machine

Available for: macOS Catalina 10.15.3

Impact: A local user may be able to read arbitrary files

Description: A logic issue was addressed with improved state management.

CVE-2020-3889: Lasse Trolle Borup of Danish Cyber Defence

Vim

Available for: macOS Catalina 10.15.3

Impact: Multiple issues in Vim

Description: Multiple issues were addressed by updating to version 8.1.1850.

CVE-2020-9769: Steve Hahn from LinkedIn

macOS Catalina 10.15.4 Update

How To Enable the Mac Startup Chime on your 2016+ MacBook Pro!

MrMacintosh.com - With one command the Mac Startup Chime is Back!!!

A new way to bring back the Mac Startup Chime has been found!

I looking through Twitter on a normal Friday night only to see this…

STARTUP SOUND pic.twitter.com/RP2YIkAKOO
— cooldude chaysegr (@chaysegr) February 21, 2020

The Mac Startup Chime is back baby!!!!

WHAT??? Ok….. I had to immediately test this out.

Run the command below in the terminal.app

sudo nvram StartupMute=%00

Reboot

I have literally rebooted 5 MacBook Pro’s multiple times just to hear that classic sound. I could not be more happy!!!!!!!

Don’t hear the sound? Check to make sure your sound is not muted. Once you bring up the volume a bit, you will then hear the chime.

If you would like to turn this off again, run the command below.

sudo nvram StartupMute=%01

Or you can reset the PRAM

This sounds familiar…

About a month after the introduction of the 2016 MacBook Pro, someone found out that you could enable the startup sound.

https://www.macobserver.com/tips/quick-tip/reenable-macbook-pro-startup-chime/

This worked for some users but stopped working early in 2017. It’s possible that Apple disabled the old way with a firmware update.

The old command was

sudo nvram BootAudio=%01

The new command is

sudo nvram StartupMute=%00

BONG!!!!!!!!

I can’t believe it. You have to understand the emotions of a true Mac fan hearing a brand new 16″ MacBook Pro producing the startup chime. The startup chime is something that has been around since 1984. To say the chime is iconic, would be an understatement to any Mac Fan.

I tested this on at least 5 different MacBook Pro’s with different BridgeOS and T1 firmware versions.

I did find a difference, the T1 Macs have the same sound as the 2017 Macbook Air and 2016 Macbook. (The final Mac Laptops to have the sound enabled by default). The T2 sound is different, it sounds a little deeper.

I would love to find out this was a hidden easter egg for 4 years!

Was this nvram value recently added? Was it hidden in plain sight for almost 4 years? I would really like to find out. The first sighting of this seems to be a Reddit Thread from 2/20/20.

https://www.reddit.com/r/mac/comments/f6z27o/2019_16_macbook_pro_with_boot_chime_reenabled_via/

If you can find someone figuring this out before this please comment below or let me know.

Apple Removed the Startup Chime on the Redesigned 2016 15″ MacBook Pro.

When Apple removed the startup chime in 2016 most Mac fans were pretty pissed. I mean why in the heck would Apple remove it? WHY??????

https://support.apple.com/en-us/HT202768

Apple states in this article that

Mac models from early 2016 and earlier make a chime sound when they start up. Mac models from late 2016 and newer don’t have a startup chime, with the exception of MacBook Air (13-inch, 2017).
Apple.com HT202768

Jim Reekes

In the link below is an interview with James Reekes the original creator of the startup chime.

Now that there’s no startup sound, it’s like sitting down at a restaurant and there’s no one there to greet you. It just feels strange
Jim Reekes on removing the startup chime

https://9to5mac.com/2018/03/24/mac-startup-sound-creator-interview/

What’s next???

There’s only one thing left to do.

Send this command out to our entire Mac Fleet!!!

🙂

Long live the Mac Startup Chime.

How to Enable Mac Startup Sound

How to Enable Mac Startup Chime

MacOS Security Updates – Mojave 2020-001 & High Sierra 2020-001

On January 28th, Apple released macOS Mojave Security Update 2020-001 and High Sierra Security Update 2020-001. Below you will find Build Versions, Download Links, Update Sizes and previous Security Update Links. MacOS Sierra is no longer supported.

How do I keep track of all the macOS Build Versions?

I document all of the macOS Build Versions like the latest Mojave 2020-001 High Sierra 2020-001 along with most Apple Applications, XProtect, Gatekeeper and MRT updates in one database. You can check out the link below.

mrmacintosh.com/macos-system-status-version-info-for-macadmins/

MacOS Mojave Security Update 2020-001 (18G3020)

macOS Mojave Security Update 2020-001
Size = 1.62gb
Package Download and Information Link
https://support.apple.com/kb/DL2031

Information on the Security fixes included in the 2020-001 Mojave Security Update

https://support.apple.com/en-us/HT210919

HT goes out to Dan Kuehling, for the Mojave Security Update Build Version! HT goes out to Nicolas Aragone, Ian Trimnell & Joost-Wim for sending over the Security Update Download Links!

MacOS High Sierra Security Update 2020-001 (17G11023)

10.13.6 High Sierra Security Update 2020-001 (17G11023)
Size = 1.92gb
Package Download and Information Link
https://support.apple.com/kb/DL2032

Information on the Security fixes included in the 2020-001 High Sierra Security Update

https://support.apple.com/en-us/HT210919

Safari Update

Safari was updated to version 13.0.5

Download Size for High Sierra = 67.9

Downloads Size for Mojave = 68.9

T2 BridgeOS Update

Both the 2020-001 and 2020-001 Security Updates upgrade BridgeOS to version – 17.16.13050

Previous Releases

Security Related Content for 2020-001

19 – Security Content Related Fixes for 10.14 and 10.13

apache_mod_php

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: Multiple issues in PHP

Description: Multiple issues were addressed by updating to PHP version 7.3.11.

CVE-2019-11043

CoreBluetooth

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6

Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution

Description: A memory corruption issue was addressed with improved input validation.

CVE-2020-3848: Jianjun Dai of Qihoo 360 Alpha Lab

CVE-2020-3849: Jianjun Dai of Qihoo 360 Alpha Lab

CVE-2020-3850: Jianjun Dai of Qihoo 360 Alpha Lab

CoreBluetooth

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6

Impact: A remote attacker may be able to leak memory

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2020-3847: Jianjun Dai of Qihoo 360 Alpha Lab

Crash Reporter

Available for: macOS Mojave 10.14.6, macOS High Sierra 10.13.6, macOS Catalina 10.15.2

Impact: A malicious application may be able to access restricted files

Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks.

CVE-2020-3835: Csaba Fitzl (@theevilbit)

Image Processing

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: Viewing a maliciously crafted JPEG file may lead to arbitrary code execution

Description: A memory corruption issue was addressed with improved input validation.

CVE-2020-3827: Samuel Groß of Google Project Zero

ImageIO

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: Processing a maliciously crafted image may lead to arbitrary code execution

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2020-3826: Samuel Groß of Google Project Zero

CVE-2020-3870

CVE-2020-3878: Samuel Groß of Google Project Zero

Intel Graphics Driver

Available for: macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: An application may be able to execute arbitrary code with system privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2020-3845: Zhuo Liang of Qihoo 360 Vulcan Team

Kernel

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: An application may be able to read restricted memory

Description: A validation issue was addressed with improved input sanitization.

CVE-2020-3875: Brandon Azad of Google Project Zero

Kernel

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: A malicious application may be able to execute arbitrary code with system privileges

Description: A type confusion issue was addressed with improved memory handling.

CVE-2020-3853: Brandon Azad of Google Project Zero

Kernel

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: A malicious application may be able to determine kernel memory layout

Description: An access issue was addressed with improved memory management.

CVE-2020-3836: Brandon Azad of Google Project Zero

Kernel

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: An application may be able to execute arbitrary code with kernel privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2020-3842: Ned Williamson working with Google Project Zero

CVE-2020-3871: Corellium

libxml2

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6

Impact: Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution

Description: A buffer overflow was addressed with improved size validation.

CVE-2020-3846: Ranier Vilela

libxpc

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: Processing a maliciously crafted string may lead to heap corruption

Description: A memory corruption issue was addressed with improved input validation.

CVE-2020-3856: Ian Beer of Google Project Zero

libxpc

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: An application may be able to gain elevated privileges

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2020-3829: Ian Beer of Google Project Zero

PackageKit

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: A malicious application may be able to overwrite arbitrary files

Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks.

CVE-2020-3830: Csaba Fitzl (@theevilbit)

sudo

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: Certain configurations may allow a local attacker to execute arbitrary code

Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2019-18634: Apple

System

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6

Impact: A malicious application may be able to overwrite arbitrary files

Description: An access issue was addressed with improved access restrictions.

CVE-2020-3855: Csaba Fitzl (@theevilbit)

Wi-Fi

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory

Description: A memory corruption issue was addressed with improved input validation.

CVE-2020-3843: Ian Beer of Google Project Zero

wifivelocityd

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: An application may be able to execute arbitrary code with system privileges

Description: The issue was addressed with improved permissions logic.

CVE-2020-3838: Dayton Pidhirney (@_watbulb)

Mojave 2020-001 High Sierra 2020-001

What’s New in the macOS Catalina 10.15.3 Update (19D76)?

macOS Catalina 10.15.3 Update (19D76) is now Available.

10.15.3 is Catalina’s third update and was released about a month and a half after the 10.15.2 Update. MacOS Catalina 10.15.3 is now available for download as a full installer.app, delta and combo update. Let’s take a look at the Catalina 10.15.3 Update (19D76) to see what’s new.

10.15.3 Patch Notes Summary

1 Known Issue
1 Undocumented Fix
2 Resolved Issues
EDIT: 23 Security Fixes

Apple’s Public Patch Notes / Release Notes Documentation

developer.apple.com/documentation/macos_release_notes

developer.apple.com/documentation/macos_release_notes/macos_catalina_10_15_3_release_notes

For more detailed information about this update and previous updates, please visit: https://support.apple.com/kb/HT210642

Previous 10.15 Releases + Previous Patch Notes

10.15.3 = (19D76) January 28th 2020 = Current Release
10.15.2 = (19C57) December 10th 2019
10.15.1 = (19B2106) November 13th 2019
10.15.1 = (19B88) October 29th 2019
10.15.0 = (19A603) October 21st 2019
10.15.0 = (19A602) October 15th 2019
10.15.0 = (19A583) October 7th 2019

Catalina 10.15.3 Info & Download Links

Delta Update

Link – https://support.apple.com/kb/DL2029

Size = 2.99gb

Product ID = 061-62842

Requirements = 10.15.2

Combo Update

Link –https://support.apple.com/kb/DL2030

Size = 4.59gb

Product ID = 061-62853

Requirements = 10.15.0, 10.15.1 or 10.15.2

HT to Howard Oakley for the download links!!

https://eclecticlight.co/2020/01/28/apple-has-released-macos-catalina-10-15-3-and-security-updates-for-mojave-and-high-sierra/

Full Installer.app

Link – Catalina 10.15.3 Mac App Store

Size = 8.67gb

Product ID = 061-44387

Requirements – 10.15 Catalina Requirements

T2 BridgeOS Update

T2 BridgeOS was updated along with the 10.15.3 update.

BridgeOS Update = 17.16.13050

Catalina 10.15.3 Update (19D76) Overview

The macOS Catalina 10.15.3 update improves the stability, reliability and security of your Mac, and is recommended for all users.
This update:

Optimizes gamma handling of low gray levels on Pro Display XDR for SDR workflows when using macOS
Improves multi-stream video editing performance for HEVC and H.264 encoded 4K video on the 16-inch MacBook Pro (2019)

Undocumented Fix – Mail.app Data loss bug is reportedly fixed.

https://mjtsai.com/blog/2019/10/11/mail-data-loss-in-macos-10-15/

Security Content for 10.15.3

https://support.apple.com/en-us/HT210919

EDIT: removed 4 10.14 and 10.13 only fixes = 23 Security Content Related Fixes

AnnotationKit

Available for: macOS Catalina 10.15.2

Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2020-3877: an anonymous researcher working with Trend Micro’s Zero Day Initiative

apache_mod_php

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: Multiple issues in PHP

Description: Multiple issues were addressed by updating to PHP version 7.3.11.

CVE-2019-11043

Audio

Available for: macOS Catalina 10.15.2

Impact: An application may be able to execute arbitrary code with system privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2020-3857: Zhuo Liang of Qihoo 360 Vulcan Team

autofs

Available for: macOS Catalina 10.15.2

Impact: Searching for and opening a file from an attacker controlled NFS mount may bypass Gatekeeper

Description: This was addressed with additional checks by Gatekeeper on files mounted through a network share.

CVE-2020-3866: Jose Castro Almeida (@HackerOn2Wheels) and René Kroka (@rene_kroka)

Crash Reporter

Available for: macOS Mojave 10.14.6, macOS High Sierra 10.13.6, macOS Catalina 10.15.2

Impact: A malicious application may be able to access restricted files

Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks.

CVE-2020-3835: Csaba Fitzl (@theevilbit)

Image Processing

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: Viewing a maliciously crafted JPEG file may lead to arbitrary code execution

Description: A memory corruption issue was addressed with improved input validation.

CVE-2020-3827: Samuel Groß of Google Project Zero

ImageIO

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: Processing a maliciously crafted image may lead to arbitrary code execution

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2020-3826: Samuel Groß of Google Project Zero

CVE-2020-3870

CVE-2020-3878: Samuel Groß of Google Project Zero

Intel Graphics Driver

Available for: macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: An application may be able to execute arbitrary code with system privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2020-3845: Zhuo Liang of Qihoo 360 Vulcan Team

IOAcceleratorFamily

Available for: macOS Catalina 10.15.2

Impact: An application may be able to execute arbitrary code with kernel privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2020-3837: Brandon Azad of Google Project Zero

IPSec

Available for: macOS Catalina 10.15.2

Impact: Loading a maliciously crafted racoon configuration file may lead to arbitrary code execution

Description: An off by one issue existed in the handling of racoon configuration files. This issue was addressed through improved bounds checking.

CVE-2020-3840: @littlelailo

Kernel

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: An application may be able to read restricted memory

Description: A validation issue was addressed with improved input sanitization.

CVE-2020-3875: Brandon Azad of Google Project Zero

Kernel

Available for: macOS Catalina 10.15.2

Impact: An application may be able to read restricted memory

Description: A memory initialization issue was addressed with improved memory handling.

CVE-2020-3872: Haakon Garseg Mørk of Cognite and Cim Stordal of Cognite

Kernel

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: A malicious application may be able to execute arbitrary code with system privileges

Description: A type confusion issue was addressed with improved memory handling.

CVE-2020-3853: Brandon Azad of Google Project Zero

Kernel

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: A malicious application may be able to determine kernel memory layout

Description: An access issue was addressed with improved memory management.

CVE-2020-3836: Brandon Azad of Google Project Zero

Kernel

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: An application may be able to execute arbitrary code with kernel privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2020-3842: Ned Williamson working with Google Project Zero

CVE-2020-3871: Corellium

libxpc

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: Processing a maliciously crafted string may lead to heap corruption

Description: A memory corruption issue was addressed with improved input validation.

CVE-2020-3856: Ian Beer of Google Project Zero

libxpc

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: An application may be able to gain elevated privileges

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2020-3829: Ian Beer of Google Project Zero

PackageKit

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: A malicious application may be able to overwrite arbitrary files

Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks.

CVE-2020-3830: Csaba Fitzl (@theevilbit)

Security

Available for: macOS Catalina 10.15.2

Impact: An application may be able to execute arbitrary code with system privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2020-3854: Jakob Rieck (@0xdead10cc) and Maximilian Blochberger of the Security in Distributed Systems Group of University of Hamburg

sudo

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: Certain configurations may allow a local attacker to execute arbitrary code

Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2019-18634: Apple

Wi-Fi

Available for: macOS Catalina 10.15.2

Impact: An application may be able to read restricted memory

Description: A validation issue was addressed with improved input sanitization.

CVE-2020-3839: s0ngsari of Theori and Lee of Seoul National University working with Trend Micro’s Zero Day Initiative

Wi-Fi

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory

Description: A memory corruption issue was addressed with improved input validation.

CVE-2020-3843: Ian Beer of Google Project Zero

wifivelocityd

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2

Impact: An application may be able to execute arbitrary code with system privileges

Description: The issue was addressed with improved permissions logic.

CVE-2020-3838: Dayton Pidhirney (@_watbulb)

What’s New in the macOS Catalina 10.15.2 Update (19C57)?

macOS Catalina 10.15.2 (19C57) is now Available.

10.15.2 is Catalina’s second update and was released about a month after the 10.15.1 Supplemental Update for the new 16″ MBPro. The combo update is now available for download as a full installer.app, delta and combo update. Let’s take a quick look at the Catalina 10.15.2 Update (19C57) and see what’s new.

10.15.2 Patch Notes Summary

5 New Features
12 Resolved Issues
13 Security Fixes

Apple’s Public Patch Notes / Release Notes Documentation

developer.apple.com/documentation/macos_release_notes

developer.apple.com/documentation/macos_release_notes/macos_catalina_10_15_2_release_notes

Previous 10.15 Releases + Previous Patch Notes

10.15.2 = (19C57) December 10th 2019 = Current Release
10.15.1 = (19B2106) November 13th 2019
10.15.1 = (19B88) October 29th 2019
10.15.0 = (19A603) October 21st 2019
10.15.0 = (19A602) October 15th 2019
10.15.0 = (19A583) October 7th 2019

Catalina 10.15.2 Info & Download Links

Delta Update

Link – https://support.apple.com/kb/DL2025

Size = 3.02gb

Product ID = 061-44066

Requirements = 10.15.1

Combo Update

Link – https://support.apple.com/kb/DL2027

Hat Tip to Ian for sending over this updated link!

Size = 4.55gb

Product ID = 061-4066

Requirements = 10.15.0 or 10.15.1

Full Installer.app

Link – Catalina 10.15.2 Mac App Store

Size = 8.68gb

Product ID = 061-10700

Requirements – 10.15 Catalina Requirements

T2 BridgeOS Update

T2 BridgeOS was updated along with the 10.15.2 update.

BridgeOS Update = 17.16.12551

Security Content for 10.15.2

support.apple.com/en-us/HT210788

13 Security Content Related Fixes

New Application Version Changes

Howard Oakley took a deep dive into the update to find that multiple applications got a version update.

eclecticlight.co/2019/12/11/what-has-changed-in-catalina-10-15-2/

Catalina 10.15.2 Update (19C57) Overview

The macOS Catalina 10.15.2 update improves the stability, reliability and performance of your Mac and is recommended for all users.

New Features

Apple News
• New layout for Apple News+ stories from The Wall Street Journal and other leading newspapers

Stocks
• Get links to related stories or more stories from the same publication at the end of an article
• “Breaking” and “Developing” labels for Top Stories
• Stories from Apple News are now available in Canada in English and French

New Resolved Issues

Music
• Restores the column browser view for managing the music library
• Resolves an issue that may prevent album artwork from appearing
• Fixes an issue that may reset music equalizer settings during playback

iTunes Remote
• Adds support for using an iPhone or iPad to remotely control the Music and TV apps on a Mac

Photos
• Resolves an issue that may cause some .AVI and .MP4 files to appear as unsupported
• Fixes an issue that prevents newly created folders from appearing in Albums view
• Addresses an issue where manually sorted images in an album may be printed or exported out of order
• An issue that prevents the zoom-to-crop tool from working in a print preview

Mail
• Addresses an issue that may cause Mail Preferences to open with a blank window
• Resolves an issue that may prevent using undo from retrieving deleted mail

Other
• Improves the reliability of syncing books and audiobooks to your iPad or iPhone through Finder
• This Fixes an issue where reminders may be out of order in the Today smart list in the Reminders app
• Resolves an issue that may cause slow typing performance in the Notes app

macOS Catalina 10.15.2 (19C57)

MacOS Security Updates – Mojave 2019-002 & High Sierra 2019-007

MrMacintosh.com - Security Updates Mojave 2019-002 (18G2022) High Sierra 2019-007 (17G10021) — Security Updates Mojave 2019-002 (18G2022) High Sierra 2019-007 (17G10021)

On December 10th, Apple released macOS Mojave Security Update 2019-002 and High Sierra Security Update 2019-007. Below you will find Build Versions, Download Links, Update Sizes and previous Security Update Links. MacOS Sierra is no longer supported.

How do I keep track of all the macOS Build Versions?

I document all of the macOS Build Versions like the latest Mojave 2019-002 High Sierra 2019-007 along with most Apple Applications, XProtect, Gatekeeper and MRT updates in one database. You can check out the link below.

mrmacintosh.com/macos-system-status-version-info-for-macadmins/

MacOS Mojave Security Update 2019-002 (18G2022)

macOS Mojave Security Update 2019-002 – 1.58gb
Package Download and Information Link
https://support.apple.com/kb/DL2027

Information on the Security fixes included in the 2019-002 Mojave Security Update

https://support.apple.com/en-us/HT210788

MacOS High Sierra Security Update 2019-007 (17G10021)

10.13.6 High Sierra Security Update 2019-007 (17G10021) Size 1.92gb
Package Download and Information Link
https://support.apple.com/kb/DL2026

Information on the Security fixes included in the 2019-007 High Sierra Security Update

https://support.apple.com/en-us/HT210788

T2 BridgeOS Update

Both the 2019-002 and 2019-007 Security Updates upgrade BridgeOS to version – 17.16.12551

Previous Releases

Mojave 2019-005 High Sierra 2019-006

The macOS Catalina 10.15.5 Update 19F96 is now Available.

10.15.5 Patch Notes Summary

Apple’s Public Patch Notes / Release Notes Documentation

Previous 10.15 Releases + Previous Patch Notes

Catalina 10.15.5 Info & Download Links

Delta Update

Combo Update

Full Installer.app

T2 BridgeOS Update

Security Content for Safari 13.1.1

New Apple Support Documents

Catalina 10.15.5 Update 19F96 Overview

This update also includes bug fixes and other improvements.

Enterprise Fixes

Announcements

Security Content for 10.15.5

Did you Install the 10.15.4 Supplemental Update on your T2 Mac, only to find that it will not power up after the Install?

Table of Contents

1. Affected Mac Models

2. Affected OS Versions

3. Problem: 10.15.4 Supplemental Update Bricked

4. Problem Description

5. Can the dead Mac be brought back to life? YES!

6. Why write about something that affects such a small number of Macs?

7. Wait a few days before installing updates.

8. Should I block the 10.15.4 Supplemental Update?

9. Does Apple Know about this issue? Are they working on a fix?

10. Links

11. Credits – Hat Tips

Apple Today Released macOS Catalina 10.15.4 Supplemental Update (19E287)

The Catalina 10.15.4 Supplemental Update Includes the following fixes.

BridgeOS update

Current and Previous Build Versions of 10.15

Links – Supplemental Update + Combo & Delta

If I deployed/cached the old 10.15.4 Installer.app for OS Upgrades, do I need to redeploy?

Security Content

Security Updates for macOS 10.14 & 10.13 are now Available.

How do I keep track of all the macOS Build Versions?

MacOS Mojave Security Update 2020-002 (18G4032)

MacOS High Sierra Security Update 2020-002 (17G12034)

Safari Update

T2 BridgeOS Update

Security Content for Safari 13.1

Previous Releases

Security Related Content for 2020-002

Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra

macOS Catalina 10.15.4 Update (19E266) is now Available.

10.15.4 Patch Notes Summary

Apple’s Public Patch Notes / Release Notes Documentation

Previous 10.15 Releases + Previous Patch Notes

Catalina 10.15.4 Info & Download Links

Delta Update

Combo Update

Full Installer.app

T2 BridgeOS Update

Security Content for Safari 13.1

New Apple Support Documents

Catalina 10.15.4 Update (19E266) Overview

Security Content for 10.15.4

A new way to bring back the Mac Startup Chime has been found!

This sounds familiar…

BONG!!!!!!!!

I would love to find out this was a hidden easter egg for 4 years!

Apple Removed the Startup Chime on the Redesigned 2016 15″ MacBook Pro.

Jim Reekes

What’s next???

How do I keep track of all the macOS Build Versions?

MacOS Mojave Security Update 2020-001 (18G3020)

MacOS High Sierra Security Update 2020-001 (17G11023)

Safari Update

T2 BridgeOS Update

Previous Releases

Security Related Content for 2020-001

apache_mod_php

CoreBluetooth

CoreBluetooth

Crash Reporter

Image Processing

ImageIO

Intel Graphics Driver