{"id":41274,"date":"2023-11-30T17:12:44","date_gmt":"2023-11-30T22:12:44","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=41274"},"modified":"2023-12-08T14:46:23","modified_gmt":"2023-12-08T19:46:23","slug":"macos-14-1-2","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2023\/11\/30\/macos-14-1-2\/","title":{"rendered":"macOS 14.1.2"},"content":{"rendered":"<p><a href=\"https:\/\/www.macrumors.com\/2023\/11\/30\/apple-releases-macos-sonoma-14-1-2\/\">Juli Clover<\/a> (<a href=\"https:\/\/support.apple.com\/en-us\/HT213895\">release notes<\/a>, <a href=\"https:\/\/support.apple.com\/en-us\/HT214032\">security<\/a>, <a href=\"https:\/\/developer.apple.com\/documentation\/macos-release-notes\/macos-14_1-release-notes\">developer<\/a>, <a href=\"https:\/\/support.apple.com\/en-us\/HT213893\">enterprise<\/a>, <a href=\"https:\/\/swcdn.apple.com\/content\/downloads\/24\/37\/052-09398-A_DIKZGBNOM0\/y4rz9dued01dtyl65nxqgd08wj2ar5cr6v\/InstallAssistant.pkg\">full installer<\/a>, <a href=\"https:\/\/swcdn.apple.com\/content\/downloads\/54\/47\/052-09460-A_HHL1JV64MF\/b7arop3bkdru7i7anbw4qdlij5tqoz20hp\/InstallAssistant.pkg\">M3<\/a>, <a href=\"https:\/\/updates.cdn-apple.com\/2023FallFCS\/fullrestores\/052-09443\/E8752548-0B80-480C-9FB4-67246672C1B5\/UniversalMac_14.1.2_23B92_Restore.ipsw\">IPSW<\/a>, <a href=\"https:\/\/updates.cdn-apple.com\/2023FallFCS\/fullrestores\/052-09457\/1210EB3D-1767-4FE4-8433-E2C21AA4D1AE\/UniversalMac_14.1.2_23B2091_Restore.ipsw\">M3<\/a>):<\/p>\n<blockquote cite=\"https:\/\/www.macrumors.com\/2023\/11\/30\/apple-releases-macos-sonoma-14-1-2\/\"><p>According to Apple&rsquo;s security support page, the update fixes two vulnerabilities that Apple says were exploited on versions of iOS earlier than iOS 16.7.1.<\/p><\/blockquote>\n\n<p>See also: <a href=\"https:\/\/mrmacintosh.com\/macos-sonoma-14-1-2-update-23b92-23b2091-whats-new\/\">Mr. Macintosh<\/a> and <a href=\"https:\/\/eclecticlight.co\/2023\/11\/30\/apple-has-released-macos-sonoma-14-1-2\/\">Howard Oakley<\/a>.<\/p>\n\n<p>Previously:<\/p>\n<ul>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2023\/11\/09\/macos-14-1-1\/\">macOS 14.1.1<\/a><\/li>\n<\/ul>\n\n<p id=\"macos-14-1-2-update-2023-12-08\">Update (2023-12-08): <a href=\"https:\/\/pxlnv.com\/linklog\/twenty-zero-days\/\">Nick Heer<\/a>:<\/p>\n<blockquote cite=\"https:\/\/pxlnv.com\/linklog\/twenty-zero-days\/\">\n<p>According to <a href=\"https:\/\/docs.google.com\/spreadsheets\/d\/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY\/edit#gid=0\">Project Zero&rsquo;s spreadsheet<\/a>, Apple patched ten zero-days in 2022, thirteen in 2021, three in 2020, two in 2019, three in 2016, and none in 2018, 2017, 2015, and 2014. It seems like a similar story across the board: the 2014 spreadsheet contains just eleven entries total, while the 2023 sheet contains fifty-six so far.<\/p>\n<\/blockquote>\n\n<p><a href=\"https:\/\/eclecticlight.co\/2023\/12\/02\/rip-rsr\/\">Howard Oakley<\/a>:<\/p>\n<blockquote cite=\"https:\/\/eclecticlight.co\/2023\/12\/02\/rip-rsr\/\"><p>It has been more than four months since Apple last released a Rapid Security Response (RSR), but last week&rsquo;s Sonoma update to version 14.1.2 looked like it should have come as one. It fixed two vulnerabilities, both in WebKit, that were already being exploited in older versions of iOS. Does the fact that it didn&rsquo;t come as an RSR indicate that Apple has given up with them already?<\/p><p>[&#8230;]<\/p><p>If that was the complete account of what Apple yet again glosses over as &ldquo;important bug fixes and security updates&rdquo;, maybe. But there was slightly more to the 14.1.2 update than just those two patches to WebKit. Also updated, albeit with small changes in build number, are \/System\/Library\/CoreServices\/UAUPlugins\/SafariUserAccountUpdater.bundle and \/System\/Library\/PrivateFrameworks\/SafariSafeBrowsing.framework. Whether Apple was alluding to those as &ldquo;important bug fixes&rdquo; or they were consequences of the fixes to WebKit we&rsquo;ll never know, but it&rsquo;s clear that the 14.1.2 update again required more than an RSR.<\/p><\/blockquote>\n\n<p><a href=\"https:\/\/eclecticlight.co\/2023\/12\/03\/last-week-on-my-mac-beware-of-the-two-sonomas\/\">Howard Oakley<\/a>:<\/p>\n<blockquote cite=\"https:\/\/eclecticlight.co\/2023\/12\/03\/last-week-on-my-mac-beware-of-the-two-sonomas\/\"><p>We&rsquo;re currently in another phase when that&rsquo;s the case: while those Macs released before September should now be running macOS 14.1.2 build 23B92, M3 models from November have their own build number of 23B2091.<\/p><p>This means that if you have an M3 and an older model, they&rsquo;re running incompatible releases of macOS.<\/p><p>[&#8230;]<\/p><p>There are other differences that are harder to explain, like an apparently much newer build of the News app, which has reached 3529.0.3 on all other Macs, but the M3&rsquo;s build number is given as 5323, as do all the private frameworks that support it, despite having the same version number of 9.1.<\/p><\/blockquote>\n\n<p><a href=\"https:\/\/eclecticlight.co\/2023\/11\/24\/red-menu-bar-in-sonoma\/\">Howard Oakley<\/a>:<\/p>\n<blockquote cite=\"https:\/\/eclecticlight.co\/2023\/11\/24\/red-menu-bar-in-sonoma\/\">\n<p>The red menu bar usually appears when switching between Stage contents, shown here when bringing the X (formerly Twitter) app and Safari onto the Stage. While the new windows appear correctly, instead of switching to the correct menu for either of them, the menu bar turns red and loses the menus that should appear at the left, for the front app.<\/p>\n<\/blockquote>","protected":false},"excerpt":{"rendered":"<p>Juli Clover (release notes, security, developer, enterprise, full installer, M3, IPSW, M3): According to Apple&rsquo;s security support page, the update fixes two vulnerabilities that Apple says were exploited on versions of iOS earlier than iOS 16.7.1. See also: Mr. Macintosh and Howard Oakley. Previously: macOS 14.1.1 Update (2023-12-08): Nick Heer: According to Project Zero&rsquo;s spreadsheet, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"2023-11-30T22:12:47Z","apple_news_api_id":"28a43685-7347-46d7-849b-a422f9618a5e","apple_news_api_modified_at":"2023-12-08T19:41:45Z","apple_news_api_revision":"AAAAAAAAAAAAAAAAAAAAAQ==","apple_news_api_share_url":"https:\/\/apple.news\/AKKQ2hXNHRteEm6Qi-WGKXg","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[2489,30,2385,2303,2232],"class_list":["post-41274","post","type-post","status-publish","format-standard","hentry","category-technology","tag-apple-m3","tag-mac","tag-macos-14-sonoma","tag-macos-release","tag-rapid-security-response"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/41274","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=41274"}],"version-history":[{"count":3,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/41274\/revisions"}],"predecessor-version":[{"id":41375,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/41274\/revisions\/41375"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=41274"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=41274"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=41274"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}