macOS Ventura 13.3.1 Update (22E261)! Emergency Security Update?

macOS Ventura 13.3.1 Update is now Available!

UPDATED: 4/10/23

This article will be continually updated as new information comes in.

Apple just released macOS Ventura 13.3.1 to the public! This update was a surprise update and includes bug fixes and important security updates.

UPDATE 4/10/23: Apple has released both macOS Monterey 12.6.5 and Big Sur 11.7.6 to patch CVE-2023-28206! Everyone should take note that this is an important patch and should plan to update as soon as possible.

The Ventura 13.3 update is being called an “Emergency Update” by one of the security researchers at the Amnesty International Security Lab.

Super proud of our team at @AmnestyTech and everyone who helped in this investigation.

Today, Apple published an emergency update for all iPhones to patch an exploit chain which we, together with @_clem1 (Google TAG) discovered in the wild. pic.twitter.com/KLMYjqi3lK
— Donncha Ó Cearbhaill (@DonnchaC) April 7, 2023

The CVE for this vulnerability is CVE-2023-28206. Apple says that the vulnerability has been “actively exploited” in the wild.

It is unknown if macOS Monterey or Big Sur is affected by this security issue. Apple did not release an associated security update for either OS.

Apple did however release a Safari 16.4.1 update for both Monterey and Big Sur to patch CVE-2023-28205.

Let’s jump in and find out what’s new!

macOS Ventura Patch Notes Summary

1. New Features – 0
2. Bug fixes – 2
4. Enterprise Changes – 0
3. Security Fixes – 2
4. Safari – Updated
5. Full installer and M1 IPSW -Full installer & IPSW restore file released
6. OpenCore Legacy Patcher Users – Testing

Full Apple Update Release list

macOS 💻 ✅

Ventura – 13.3.1 (22E261)
Monterey – None
Big Sur – None
Safari – 16.4.1 is included in the Ventura 13.3.1 update and is available as a standalone update for macOS Monterey and Big Sur.
Xcode – None
Studio Display Firmware update = None

iOS📱✅

iOS – 16.4.1 (20E252)
iPadOS – 16.4.1 (20E252)
tvOS – none
audioOS – none
watchOS – none

My macOS Ventura 13.3.1 Update video.

1. Apple Links
2. Areas of interest for this update
3. Ventura Public & Beta Release History
4. macOS Ventura Full Installer.app
5. Apple Silicon M1 &M2 IPSW Restore file Update
6. macOS Ventura Update sizes
7. Apple Silicon M1 System Firmware Version
8. Apple Silicon M1 OS loader Version (iBoot)
9. Intel T2 BridgeOS Update
10. Safari Update
11. What’s new for enterprise in macOS Ventura
12. Security Content of macOS Ventura
13. macOS Ventura Release Notes / Patch Notes / Changes

Click “Continue Reading” for the rest of the article.

1. Apple Links

macOS Ventura Mac App Store download link = https://apps.apple.com/us/app/macos-ventura/id1638787999?mt=12

HT213268 What’s new in the updates for macOS Ventura
HT213327 What’s new for enterprise in macOS Ventura
HT213471 Manage upgrading to macOS Ventura in your organization
HT213356 If you see a message that macOS Server is not supported when upgrading to macOS Ventura
Platform Security Guide – New macOS Rapid Security Response system.
Platform Guide Deployment – What’s new in Apple platform deployment

AppleSeed Notes Link = appleseed.apple.com/

Developer Public Link = developer.apple.com/documentation/macos-release-notes

macOS Deployment References Changes – https://support.apple.com/guide/deployment-reference-macos/document-revision-history-apd04dff7069/web

3. Ventura Public & Beta Release History

21. Ventura 13.3.1 (22E262) – 4/07/23
20. Ventura 13.3 (22E252) – 3/27/23
19. Ventura 13.2.1 (22D68) – 2/13/23 – My Release Notes
18. Ventura 13.2 (22D49) – 1/23/22 – My Release Notes
17. Ventura 13.1 (22C65) – 12/12/22 – My Release Notes
16. Ventura 13.0.1 (22A400) – 11/09/22 – My Release Notes
15. Ventura 13.0.0 (22A380) – 10/24/22 – My Release Notes
14. Ventura 13.0 RC 2 (22A380) – 10/20/22
13. Ventura 13.0 RC (22A379) – 10/18/22
12. Ventura Beta 11 (22A5373b) – 10/11/22
11. Ventura Beta 10 (22A5365d) – 10/08/22
10. Ventura Beta 9 (22A5358e) – 9/27/22
9. Ventura Beta 8 (22A5352e) – 9/20/22
8. Ventura Beta 7 (22A5342f) – 9/09/22 – My Release Notes
7. Ventura Beta 6 (22A5331f) – 8/25/22 – My Release Notes
6. Ventura Beta 5 (22A5321d) – 8/08/22 – My Release Notes
5. Ventura Beta 4 (22A5311f) – 7/27/22 – My Release Notes
4. Ventura Public Beta (22A5295i) – 7/11/22 – Release Notes
3. Ventura Beta 3 (22A5295h) – 7/06/22 – My Release Notes
2. Ventura Beta 2 (22A5286j) – 6/14/21 – My Release Notes
1. Ventura Beta 1 (22A5266r) – 6/06/21 – My Release Notes

4. macOS Ventura Full Installer.app

Apple has released the full installer for macOS Ventura. I list all the of the Full installers in the link below.

https://mrmacintosh.com/macos-ventura-13-full-installer-database-download-directly-from-apple/

InstallAssistant.pkg = Full download. Installing this package will add the full “Install macOS Ventura.app” to your applications folder.

5. Apple Silicon IPSW Restore file Update

Apple has released the full IPSW restore file of macOS for Apple Silicon M1 Macs. I keep track of all of them in my Apple Silicon Firmware Database

Get them here –> https://mrmacintosh.com/apple-silicon-m1-full-macos-restore-ipsw-firmware-files-database/

6. macOS Ventura Update sizes

Ventura Delta Update

The delta update will automatically change in size for exactly what your macOS version needs.

1. Delta from macOS Ventura 13.3 = 1.54GB
2. Full update with size 11.5 GB

Thank you DhinakG!!

7. Apple Silicon M1 System Firmware Version

This update has a new firmware update. The version number is reported in System Information under “System Firmware Version“

Apple Silicon M1 Firmware – NOT Updated!

21. macOS Ventura 13.3.1 = 8422.100.650
20. macOS Ventura 13.3 = 8422.100.650
19. macOS Ventura 13.2.1 = 8419.80.7
18. macOS Ventura 13.2 = 8419.80.7
17. macOS Ventura 13.1 = 8419.60.44
16. macOS Ventura 13.0.1 = 8419.41.10
15. macOS Ventura 13.0 = 8419.41.10
14. macOS Ventura 13 Beta RC2 = 8419.41.10
13. macOS Ventura 13 Beta RC = 8419.41.10
12. macOS Ventura 13 Beta 11 = 8419.41.10
11. macOS Ventura 13 Beta 10 = 8419.41.10
10. macOS Ventura 13 Beta 9 = 8419.41.10
9. macOS Ventura 13 Beta 8 = 8419.40.95
8. macOS Ventura 13 Beta 7 = 8419.40.75
7. macOS Ventura 13 Beta 6 = 8419.40.33.0.1
6. macOS Ventura 13 Beta 5 = 8419.40.2.0.5
5. macOS Ventura 13 Beta 4 = 8419.0.151.0.1
4. macOS Ventura 13 Public Beta = No change
3. macOS Ventura 13 Beta 3 = 8419.0.113.0.1
2. macOS Ventura 13 Beta 2 = 8419.0.79.0.2
1. macOS Ventura 13 Beta 1 = 8419.0.42.111.3

8. Apple Silicon M1 OS loader Version (iBoot)

OS Loader Version (iBoot) also referred to as “iBoot second-stage loader”, is Apple’s stage 2 bootloader. The OS loader version will be the same as the “System Firmware Version” on the latest OS. On previous versions of macOS Monterey and Big Sur, the OS loader version will be a version behind. Example = Monterey = 7459.121.3 & Big Sur = 6723.140.2

OS Loader version = NOT Updated

21. macOS Ventura 13.3.1 = 8422.100.650
20. macOS Ventura 13.3 = 8422.100.650
19. macOS Ventura 13.2.1 = 8419.80.7
18. macOS Ventura 13.2 = 8419.80.7
17. macOS Ventura 13.1 = 8419.60.44
16. macOS Ventura 13.0.1 = 8419.41.10
15. macOS Ventura 13.0 = 8419.41.10
14. macOS Ventura 13 RC2 = 8419.41.10
13. macOS Ventura 13 Beta RC = 8419.41.10
12. macOS Ventura 13 Beta 11 = 8419.41.10
11. macOS Ventura 13 Beta 10 = 8419.41.6
10. macOS Ventura 13 Beta 9 = 8419.40.102
9. macOS Ventura 13 Beta 8 = 8419.40.95
8. macOS Ventura 13 Beta 7 = 8419.40.75
7. macOS Ventura 13 Beta 6 = 8419.40.33.0.1
6. macOS Ventura 13 Beta 5 = 8419.40.2.0.5
5. macOS Ventura 13 Beta 4 = 8419.0.151.0.1
4. macOS Ventura 13 Public Beta = No change
3. macOS Ventura 13 Beta 3 = 8419.0.113.0.1
2. macOS Ventura 13 Beta 2 = 8419.0.79.0.2
1. macOS Ventura 13 Beta 1 = 8419.0.42.111.3

9. Intel T2 BridgeOS Update

The Version of BridgeOS for your T2 Security Chip (2018-2020 Intel Macs) was updated.

BridgeOS version = NOT Updated!

20. macOS Ventura 13.3.1 = 20.16.4252.0.0
19. macOS Ventura 13.3 = 20.16.4252.0.0
19. macOS Ventura 13.2.1 = 20.16.3045.0.0
18. macOS Ventura 13.2 = 20.16.3045.0.0
17. macOS Ventura 13.1 = 20.16.2059.0.0
16. macOS Ventura 13.0.1 = 20.16.420.0.0
15. macOS Ventura 13.0 = 20.16.411.0.0
14. macOS Ventura 13 RC2 = 20.16.411.0.0
13. macOS Ventura 13 RC = 20.16.411.0.0
12. macOS Ventura 13 Beta 11 =
11. macOS Ventura 13 Beta 10 =
10. macOS Ventura 13 Beta 9 =
9. macOS Ventura 13 Beta 8 = 20.16.386.5.5
8. macOS Ventura 13 Beta 7 = 20.16.376.5.2
7. macOS Ventura 13 Beta 6 = 20.16.365.5.4
6. macOS Ventura 13 Beta 5 = 20.16.355.5.4
5. macOS Ventura 13 Beta 4 = 20.16.345.5.4
4. macOS Ventura 13 Public Beta = No change
3. macOS Ventura 13 Beta 3 = 20.16.329.5.5
2. macOS Ventura 13 Beta 2 = 20.16.320.5.6
1. macOS Ventura 13 Beta 1 = 20.16.300.5.13

10. Safari Update

The new version of Safar 16 is included in the macOS Ventura update.

Safari = Updated!

21. macOS Ventura 13.3.1 = 16.4.1 (18615.1.26.11.23)
20. macOS Ventura 13.3 = 16.4 (18614.4.6.1.6)
19. macOS Ventura 13.2.1 = 16.3.1 (18614.4.6.11.6)
18. macOS Ventura 13.2 = 16.3 (18614.4.6.1.5)
17. macOS Ventura 13.1 = 16.2 (18614.3.7.1.5)
16. macOS Ventura 13.0.1 = 16.1 (181614.2.9.1.12)
14. macOS Ventura 13 RC2 = 16.1 (18614.2.9.1.12)
13. macOS Ventura 13 RC = 16.1 (18614.2.9.1.10)
12. macOS Ventura 13 Beta 11 = 16.1 (18614.2.9.1.8)
11. macOS Ventura 13 Beta 10 = 16.1 (18614.2.9.1.4)
10. macOS Ventura 13 Beta 9 = 16.1 (18614.2.7.1.1)
9. macOS Ventura 13 Beta 8 = 16.1 (18614.2.6.1.1)
8. macOS Ventura 13 Beta 7 = 16.1 (18614.2.3.1.1)
7. macOS Ventura 13 Beta 6 = 16.1 (18614.2.1.1.1)
6. macOS Ventura 13 Beta 5 = 16 (18614.1.25.11.1)
5. macOS Ventura 13 Beta 4 = 16 (18614.1.22.1.2)
4. macOS Ventura 13 Public Beta = No change
3. macOS Ventura 13 Beta 3 = 16 (18614.1.19.1.5)
2. macOS Ventura 13 Beta 2 = 16 (18614.1.16.11.3)
1. macOS Ventura 13 Beta 1 = 16 (18614.1.14.1.15)

11. What’s new for Enterprise in macOS Ventura

Enterprise changes in macOS Ventura

Fixes and improvements

none

https://support.apple.com/en-us/HT213327

12. Security Content of macOS Ventura

Security vulnerabilities in this Ventura Update

2 Security fixes addressed in the 13.3.1 update!!

IOSurfaceAccelerator

Available for: macOS Ventura

Impact: An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.

Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2023-28206: Clément Lecigne of Google’s Threat Analysis Group and Donncha Ó Cearbhaill of Amnesty International’s Security Lab

WebKit

Available for: macOS Ventura

Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Description: A use after free issue was addressed with improved memory management.

WebKit Bugzilla: 254797
CVE-2023-28205: Clément Lecigne of Google’s Threat Analysis Group and Donncha Ó Cearbhaill of Amnesty International’s Security Lab

https://support.apple.com/en-us/HT213721

https://support.apple.com/en-us/HT201222

13. macOS Ventura Release Notes