macOS 15.4.1

Juli Clover (release notes, security, enterprise, no developer, full installer, IPSW):

According to Apple’s release notes, macOS Sequoia 15.4.1 includes important bug fixes and security updates, and is recommended for all users.

The enterprise release notes include the tantalizing line, “Improves reliability when installing macOS updates,” but it’s not clear whether that refers to any of the recent issues I’ve had.

See also: Mr. Macintosh and Howard Oakley.

Lee Mendoza:

macOS 15.4.1 does not resolve the issue preventing users with home directories that are not on the boot volume from logging in when System Integrity Protection (SIP) is enabled.

Ric Ford:

The macOS 15.4.1 update enabled automatic updates without notification or permission here, so you may have to manually disable it again in Settings > General > Software Update > Automatic Updates if that’s your personal preference, too.

It did not do this on my Mac.

Francisco Tolmasky:

You know what I never want? For macOS to FUCK WITH MY SETTINGS on point updates. STOP TURNING ON MY BLUETOOTH AND WIFI FOR YOUR BRAINDEAD POINT UPDATES.

Previously:

Bluetooth Dark Patterns Mac macOS 15 Sequoia macOS Release Software Update Wi-Fi

3 Comments

iOS 18.4.1 and iPadOS 18.4.1

Juli Clover (iOS/iPadOS release notes, security, no enterprise, no developer):

There have been complaints about issues with CarPlay and deleted apps being restored, and iOS 18.4.1 includes several bug fixes. According to Apple’s release notes, the update includes bug fixes and security updates.

Juli Clover:

According to Apple, it is aware of reports that these vulnerabilities may have been actively exploited in the wild. Apple says that the security flaws were potentially used in an “extremely sophisticated attack against specific targeted individuals.”
One of the issues impacts CoreAudio, and involves a maliciously crafted audio file. Processing the audio stream in the media file could result in code execution. Apple fixed the memory corruption issue with improved bounds checking.
The other vulnerability affected pointer authentication code, and an attacker with arbitrary read and write capability could bypass the Pointer Authentication features that prevent memory from being tampered with. Apple removed the vulnerable code to prevent the exploit from working.

CVE-2025-31201 sounds like a different PAC issue than the one I mentioned last week.

Joe Rossignol: