macOS Ventura 13.5.2 Update – ZERO DAY SECURITY UPDATE!

macOS Ventura 13.5.2 Update

macOS Ventura 13.5.2 (22G91) Update is now Available!

UPDATED: 9/19/23

This article will be continually updated as new information comes in.

Apple just released macOS Ventura 13.5.2 to the public! Let’s jump in and find out what’s new in this update.

This is an important security update that patches a known zero day vulnerability called BLASTPASS. A zero day means the exploit was actively used before Apple was able to fix it and patch it with 13.5.2.

UPDATE #2

Citizenlab the group that reported the venerability to Apple says the exploit is an “NSO Group iPhone Zero-Click, Zero-Day Exploit” CVE-2023-41064 CVE-2023-41061

Apple’s Security Engineering and Architecture team and Citizen Lab believe that Lockdown Mode blocks this particular attack.

https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/

UPDATE #1

CIS has issued a Security Bulletin 2023-100 that discusses the CVE-2023-41064 venerability. The recommendation is to patch ASAP for large and medium companies.

https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-apple-products-could-allow-for-arbitrary-code-execution_2023-100

RISK:

Government:

Large and medium government entities: HIGH

Small government: MEDIUM

Businesses:

Large and medium business entities: HIGH

Small business entities: MEDIUM

macOS Ventura 13.5.2 Security Update

Released September 7, 2023

ImageIO

Available for: macOS Ventura

Impact: Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2023-41064: The Citizen Lab at The University of Torontoʼs Munk School

My macOS Ventura 13.5.2 Update Video!

macOS Ventura Patch Notes Summary

  • 1. New Features – none
  • 2. Bug fixes – none
  • 4. Enterprise Changes – None
  • 3. Security Fixes – 1
  • 4. Safari Security (Webkit) – None
  • 5. Full installer and M1 IPSW – Full installer and M1/M2 IPSW restore file released!
  • 6. OpenCore Legacy Patcher Users – Testing in progress with OCLP 0.6.8

Full Apple Public Update Release list

macOS 💻 ✅

  • Ventura 13.5.2 (22G91)
  • Monterey – None – Current = 12.6.8 (21G725)
  • Big Sur – None – Current = 11.7.9 (20G1426)
  • Safari – None – Current 16.6
  • Xcode – None
  • Studio Display Firmware update = None

iOS📱✅

  • iOS – iOS 16.6.1 (20G81)
  • iPadOS – iPadOS 16.6.1 (20G81)
  • audioOS – None – Current = 16.6 (20M73)
  • tvOS – None – Current = 16.6 (20M73)
  • watchOS – 9.6.1 (20U90)

Table of Contents

  • 1. Apple Links
  • 2. Areas of interest for this update
  • 3. Ventura Public & Beta Release History
  • 4. macOS Ventura Full Installer.app
  • 5. Apple Silicon M1 &M2 IPSW Restore file Update
  • 6. macOS Ventura Update sizes
  • 7. Apple Silicon M1 System Firmware Version
  • 8. Apple Silicon M1 OS loader Version (iBoot)
  • 9. Intel T2 BridgeOS Update
  • 10. Safari Update
  • 11. What’s new for enterprise in macOS Ventura
  • 12. Security Content of macOS Ventura
  • 13. macOS Ventura Release Notes / Patch Notes / Changes

Click “Continue Reading” for the rest of the article.

1. Apple Links

macOS Ventura Mac App Store download link = https://apps.apple.com/us/app/macos-ventura/id1638787999?mt=12

  1. HT213268 What’s new in the updates for macOS Ventura
  2. HT213327 What’s new for enterprise in macOS Ventura
  3. HT213471 Manage upgrading to macOS Ventura in your organization
  4. HT213356 If you see a message that macOS Server is not supported when upgrading to macOS Ventura
  5. Platform Security Guide – New macOS Rapid Security Response system.
  6. Platform Guide Deployment – What’s new in Apple platform deployment

AppleSeed Notes Link = appleseed.apple.com/

Developer Public Link = developer.apple.com/documentation/macos-release-notes

macOS Deployment References Changes – https://support.apple.com/guide/deployment-reference-macos/document-revision-history-apd04dff7069/web

3. Ventura Public & Beta Release History

  • 26. Ventura 13.5.2 (22G91) – 9/07/23
  • 25. Ventura 13.5.1 (22G90) – 8/17/23
  • 24. Ventura 13.5 (22G74) – 7/24/23
  • 23. Ventura 13.4.1 (22F82) – 6/21/23
  • 22. Ventura 13.4 (22F66) – 5/16/23
  • 21. Ventura 13.3.1 (22E262) – 4/07/23
  • 20. Ventura 13.3 (22E252) – 3/27/23
  • 19. Ventura 13.2.1 (22D68) – 2/13/23 – My Release Notes
  • 18. Ventura 13.2 (22D49) – 1/23/22 – My Release Notes
  • 17. Ventura 13.1 (22C65) – 12/12/22 – My Release Notes
  • 16. Ventura 13.0.1 (22A400) – 11/09/22 – My Release Notes
  • 15. Ventura 13.0.0 (22A380) – 10/24/22 – My Release Notes
  • 14. Ventura 13.0 RC 2 (22A380) – 10/20/22
  • 13. Ventura 13.0 RC (22A379) – 10/18/22
  • 12. Ventura Beta 11 (22A5373b) – 10/11/22
  • 11. Ventura Beta 10 (22A5365d) – 10/08/22
  • 10. Ventura Beta 9 (22A5358e) – 9/27/22
  • 9. Ventura Beta 8 (22A5352e) – 9/20/22
  • 8. Ventura Beta 7 (22A5342f) – 9/09/22 – My Release Notes
  • 7. Ventura Beta 6 (22A5331f) – 8/25/22 – My Release Notes
  • 6. Ventura Beta 5 (22A5321d) – 8/08/22 – My Release Notes
  • 5. Ventura Beta 4 (22A5311f) – 7/27/22 – My Release Notes
  • 4. Ventura Public Beta (22A5295i) – 7/11/22 – Release Notes
  • 3. Ventura Beta 3 (22A5295h) – 7/06/22 – My Release Notes
  • 2. Ventura Beta 2 (22A5286j) – 6/14/21 – My Release Notes
  • 1. Ventura Beta 1 (22A5266r) – 6/06/21 – My Release Notes

4. macOS Ventura Full Installer.app

Apple has released the full installer for macOS Ventura. I list all the of the Full installers in the link below.

https://mrmacintosh.com/macos-ventura-13-full-installer-database-download-directly-from-apple/

InstallAssistant.pkg = Full download. Installing this package will add the full “Install macOS Ventura.app” to your applications folder.

5. Apple Silicon IPSW Restore file Update

Apple has released the full IPSW restore file of macOS for Apple Silicon M1 Macs. I keep track of all of them in my Apple Silicon Firmware Database

Get them here –> https://mrmacintosh.com/apple-silicon-m1-full-macos-restore-ipsw-firmware-files-database/

6. macOS Ventura Update sizes

Ventura Delta Update

The delta update will automatically change in size for exactly what your macOS version needs.

  • 1. Delta from macOS Ventura 13.5.1 = 475MB (Intel)
  • 2. Delta from macOS Ventura 13.5.1 = 727MB (M1)
  • 2. Full update with size 11.5 GB

Thank you DhinakG!!

7. Apple Silicon M1 System Firmware Version

This update has a new firmware update. The version number is reported in System Information under “System Firmware Version

Apple Silicon M1 Firmware – Not Updated

  • 26. macOS Ventura 13.5.2 – 8422.141.2
  • 25. macOS Ventura 13.5.1 – 8422.141.2
  • 24. macOS Ventura 13.5 – 8422.141.2
  • 23. macOS Ventura 13.4.1 – 8422.121.1
  • 22. macOS Ventura 13.4 = 8422.121.1
  • 21. macOS Ventura 13.3.1 = 8422.100.650
  • 20. macOS Ventura 13.3 = 8422.100.650
  • 19. macOS Ventura 13.2.1 = 8419.80.7
  • 18. macOS Ventura 13.2 = 8419.80.7
  • 17. macOS Ventura 13.1 = 8419.60.44
  • 16. macOS Ventura 13.0.1 = 8419.41.10
  • 15. macOS Ventura 13.0 = 8419.41.10
  • 14. macOS Ventura 13 Beta RC2 = 8419.41.10
  • 13. macOS Ventura 13 Beta RC = 8419.41.10
  • 12. macOS Ventura 13 Beta 11 = 8419.41.10
  • 11. macOS Ventura 13 Beta 10 = 8419.41.10
  • 10. macOS Ventura 13 Beta 9 = 8419.41.10
  • 9. macOS Ventura 13 Beta 8 = 8419.40.95
  • 8. macOS Ventura 13 Beta 7 = 8419.40.75
  • 7. macOS Ventura 13 Beta 6 = 8419.40.33.0.1
  • 6. macOS Ventura 13 Beta 5 = 8419.40.2.0.5
  • 5. macOS Ventura 13 Beta 4 = 8419.0.151.0.1
  • 4. macOS Ventura 13 Public Beta = No change
  • 3. macOS Ventura 13 Beta 3 = 8419.0.113.0.1
  • 2. macOS Ventura 13 Beta 2 = 8419.0.79.0.2
  • 1. macOS Ventura 13 Beta 1 = 8419.0.42.111.3

8. Apple Silicon M1 OS loader Version (iBoot)

OS Loader Version (iBoot) also referred to as “iBoot second-stage loader”, is Apple’s stage 2 bootloader. The OS loader version will be the same as the “System Firmware Version” on the latest OS. On previous versions of macOS Monterey and Big Sur, the OS loader version will be a version behind. Example = Monterey = 7459.121.3 & Big Sur = 6723.140.2

OS Loader version = Not Updated

  • 26. macOS Ventura 13.5.2 – 8422.141.2
  • 25. macOS Ventura 13.5.1 – 8422.141.2
  • 24. macOS Ventura 13.5 – 8422.141.2
  • 23. macOS Ventura 13.4.1 -8422.121.1
  • 22. macOS Ventura 13.4 = 8422.121.1
  • 21. macOS Ventura 13.3.1 = 8422.100.650
  • 20. macOS Ventura 13.3 = 8422.100.650
  • 19. macOS Ventura 13.2.1 = 8419.80.7
  • 18. macOS Ventura 13.2 = 8419.80.7
  • 17. macOS Ventura 13.1 = 8419.60.44
  • 16. macOS Ventura 13.0.1 = 8419.41.10
  • 15. macOS Ventura 13.0 = 8419.41.10
  • 14. macOS Ventura 13 RC2 = 8419.41.10
  • 13. macOS Ventura 13 Beta RC = 8419.41.10
  • 12. macOS Ventura 13 Beta 11 = 8419.41.10
  • 11. macOS Ventura 13 Beta 10 = 8419.41.6
  • 10. macOS Ventura 13 Beta 9 = 8419.40.102
  • 9. macOS Ventura 13 Beta 8 = 8419.40.95
  • 8. macOS Ventura 13 Beta 7 = 8419.40.75
  • 7. macOS Ventura 13 Beta 6 = 8419.40.33.0.1
  • 6. macOS Ventura 13 Beta 5 = 8419.40.2.0.5
  • 5. macOS Ventura 13 Beta 4 = 8419.0.151.0.1
  • 4. macOS Ventura 13 Public Beta = No change
  • 3. macOS Ventura 13 Beta 3 = 8419.0.113.0.1
  • 2. macOS Ventura 13 Beta 2 = 8419.0.79.0.2
  • 1. macOS Ventura 13 Beta 1 = 8419.0.42.111.3

9. Intel T2 BridgeOS Update

The Version of BridgeOS for your T2 Security Chip (2018-2020 Intel Macs) was updated.

BridgeOS version = Not Updated

  • 26. macOS Ventura 13.5.2 – 20.16.6072.0.0
  • 25. macOS Ventura 13.5.1 – 20.16.6072.0.0
  • 24. macOS Ventura 13.5 – 20.16.6072.0.0
  • 23. macOS Ventura 13.4.1 -20.16.5060.0.0
  • 22. macOS Ventura 13.4 = 20.16.5058.0.0
  • 20. macOS Ventura 13.3.1 = 20.16.4252.0.0
  • 19. macOS Ventura 13.3 = 20.16.4252.0.0
  • 19. macOS Ventura 13.2.1 = 20.16.3045.0.0
  • 18. macOS Ventura 13.2 = 20.16.3045.0.0
  • 17. macOS Ventura 13.1 = 20.16.2059.0.0
  • 16. macOS Ventura 13.0.1 = 20.16.420.0.0
  • 15. macOS Ventura 13.0 = 20.16.411.0.0
  • 14. macOS Ventura 13 RC2 = 20.16.411.0.0
  • 13. macOS Ventura 13 RC = 20.16.411.0.0
  • 12. macOS Ventura 13 Beta 11 =
  • 11. macOS Ventura 13 Beta 10 =
  • 10. macOS Ventura 13 Beta 9 =
  • 9. macOS Ventura 13 Beta 8 = 20.16.386.5.5
  • 8. macOS Ventura 13 Beta 7 = 20.16.376.5.2
  • 7. macOS Ventura 13 Beta 6 = 20.16.365.5.4
  • 6. macOS Ventura 13 Beta 5 = 20.16.355.5.4
  • 5. macOS Ventura 13 Beta 4 = 20.16.345.5.4
  • 4. macOS Ventura 13 Public Beta = No change
  • 3. macOS Ventura 13 Beta 3 = 20.16.329.5.5
  • 2. macOS Ventura 13 Beta 2 = 20.16.320.5.6
  • 1. macOS Ventura 13 Beta 1 = 20.16.300.5.13

10. Safari Update

The new version of Safar 16 is included in the macOS Ventura update.

Safari = Not Updated

  • 26. macOS Ventura 13.5.2 – 16.6 (18615.3.12.11.2)
  • 25. macOS Ventura 13.5.1 – 16.6 (18615.3.12.11.2)
  • 24. macOS Ventura 13.5 = 16.6 (18615.3.12.11.2)
  • 23. macOS Ventura 13.4.1 = 16.5.1
  • 22. macOS Ventura 13.4 = 16.5
  • 21. macOS Ventura 13.3.1 = 16.4.1 (18615.1.26.11.23)
  • 20. macOS Ventura 13.3 = 16.4 (18614.4.6.1.6)
  • 19. macOS Ventura 13.2.1 = 16.3.1 (18614.4.6.11.6)
  • 18. macOS Ventura 13.2 = 16.3 (18614.4.6.1.5)
  • 17. macOS Ventura 13.1 = 16.2 (18614.3.7.1.5)
  • 16. macOS Ventura 13.0.1 = 16.1 (181614.2.9.1.12)
  • 14. macOS Ventura 13 RC2 = 16.1 (18614.2.9.1.12)
  • 13. macOS Ventura 13 RC = 16.1 (18614.2.9.1.10)
  • 12. macOS Ventura 13 Beta 11 = 16.1 (18614.2.9.1.8)
  • 11. macOS Ventura 13 Beta 10 = 16.1 (18614.2.9.1.4)
  • 10. macOS Ventura 13 Beta 9 = 16.1 (18614.2.7.1.1)
  • 9. macOS Ventura 13 Beta 8 = 16.1 (18614.2.6.1.1)
  • 8. macOS Ventura 13 Beta 7 = 16.1 (18614.2.3.1.1)
  • 7. macOS Ventura 13 Beta 6 = 16.1 (18614.2.1.1.1)
  • 6. macOS Ventura 13 Beta 5 = 16 (18614.1.25.11.1)
  • 5. macOS Ventura 13 Beta 4 = 16 (18614.1.22.1.2)
  • 4. macOS Ventura 13 Public Beta = No change
  • 3. macOS Ventura 13 Beta 3 = 16 (18614.1.19.1.5)
  • 2. macOS Ventura 13 Beta 2 = 16 (18614.1.16.11.3)
  • 1. macOS Ventura 13 Beta 1 = 16 (18614.1.14.1.15)

11. What’s new for Enterprise in macOS Ventura

Enterprise changes in macOS Ventura

Fixes and improvements

  • none

https://support.apple.com/en-us/HT213327

12. Security Content of macOS Ventura

Security fixes addressed in the 13.5.2 update = 1

macOS Ventura 13.5.2 security fixes Apple Page:

https://support.apple.com/en-us/HT213906

13. macOS Ventura Release Notes

Ventura 13.5.2

macOS Ventura 13.5.2 – Restart Required

This update provides important security fixes and is recommended for all users.

For information on the security content of Apple software updates, please visit this website: https://support.apple.com/kb/HT201222

https://developer.apple.com/documentation/macos-release-notes

Liked it? Take a second to support Mr. Macintosh on Patreon!
Become a patron at Patreon!