New in OS X: Get MacRumors Push Notifications on your Mac

Resubscribe Now Close

Apple Releases macOS High Sierra 10.13.2 Supplemental Update With Spectre Fix

Apple today released a macOS High Sierra 10.13.2 supplemental update, which comes a little more than a month after the initial release of macOS High Sierra 10.13.2.

macOS High Sierra 10.13.2 is a free update for all customers who have a compatible machine. The update can be downloaded using the Software Update function in the Mac App Store.


macOS High Sierra 10.13.2 addresses the "Spectre" vulnerability that was publicized last week. Spectre, along with its sister vulnerability "Meltdown" are serious hardware-based exploits that take advantage of the speculative execution mechanism of a CPU, allowing hackers to gain access to sensitive information.

While Meltdown was addressed in the initial macOS High Sierra 10.13.2 update, Apple said it would introduce a mitigation for Spectre in macOS and iOS early this week. There is no hardware fix for Spectre, so Apple is addressing the vulnerability using Safari-based software workarounds.

There's also a Safari 11.0.2 update available for macOS Sierra 10.12.6 and OS X El Capitan 10.11.6 that is designed to mitigate the effects of the Spectre vulnerability. Customers running macOS Sierra and OS X El Capitan should download the new version of Safari to make sure their machines are protected.

Related Roundup: macOS High Sierra


Top Rated Comments

(View all)

9 months ago
Lol I'm not getting High Sierra. PoS full of bugs and performance issues.
Rating: 11 Votes
9 months ago

A safari-based workaround? Please...


Yah, and other browsers are responsible for their own fixes.

With browsers fixed, Spectre can’t be exploited via a web page.
Rating: 10 Votes
9 months ago
Can't wait to see the benchmarks!
Rating: 9 Votes
9 months ago

How dare they abandon people with machines more then 8 years old. :rolleyes:


I'm not aware of machines that can support Yosemite and cannot support El Capitan or Sierra.

There are a lot of people that cannot upgrade to High Sierra yet because some gear in the pro audio network isn't yet fully optimised to it, gear that is worth much, much more than a Mac that comes with High Sierra out of the box.

Official compatibility and real world stability are two different things in this world, that's why we stay behind one or two versions.

It is not our personal preference that Apple "has" to release a new version each year and we need to have the latest iMessage or whatever features, we would gladly prefer the strategy that was applied in the Tiger/Leopard/Snow Leopard days. We need security and a rock solid system, that's why we buy Apple products in the first place, right?
Rating: 8 Votes
9 months ago
Geekbench results for
iMac (27-inch Retina Late 2015)
Pre update:
Single-Core [B]Score [/B]5302 Multi-Core Score 17899
Geekbench 4.2.0 Tryout for Mac OS X x86 (64-bit)
Upload Date November 10 2017 07:52 AM

Post update is better!
Single-Core [B]Score [/B]5310 Multi-Core Score 18162
Geekbench 4.2.0 Tryout for Mac OS X x86 (64-bit)
Upload Date January 08 2018 06:47 PM
Rating: 8 Votes
9 months ago

This video about 3:30 onwards has some good stuff (the stuff prior to 3:30 is about the root bug)

[MEDIA=youtube]Lr1rEdRgxVY[/MEDIA]

Another example of a graphic glitch:
[MEDIA=youtube]rFc64Eep5WU[/MEDIA]


Except when you read the comments it seems there are logical explanations for this performance and after the new file system is indexed most report their Mac computers running faster on High Sierra.

And a recent video update explained that when the Youtube creator installed the latest High Sierra update, 99 percent of his problems were fixed, what a waste of time.
Rating: 8 Votes
9 months ago

Not at all. Fixes should be made to support EVERY machine Apple sold that has the exploit. Otherwise, let the lawsuits begin (again).

This would potentially go all the way back to the Power Mac x500 computers from 1995.
Rating: 7 Votes
9 months ago

Agreed. Since Apple can't throttle via battery on desktops, this is their way of getting you to buy new hardware.

lmao, you can't be serious.
Rating: 7 Votes
9 months ago

After last macOS update (10.13.2; build 17C2205) ... on iMac Pro 10 core


There is a reason why the iMac Pro gets a different build number 17C2205 instead of 17C205 which most other macs get.

There are actually 2 different versions of the supplemental update. 1 for most macs except the iMac Pro, and another specifically for the iMac Pro.

Strangely there is no firmware update except for the iMac Pro. Not since 10.10.1 has there been a macos update without an associated firmware update (including other supplementals, security updates and all betas).

There is also no embedded os firmware either for most macs except the iMac Pro.

10.13.2 Supplemental Update for most macs except iMac Pro:



http://swcdn.apple.com/content/downloads/01/34/091-58876/ug5y3ezyagdvc2q89229x9wyripp4v22ni/macOSUpd10.13.2Supplemental.pkg


http://swcdn.apple.com/content/downloads/01/34/091-58876/ug5y3ezyagdvc2q89229x9wyripp4v22ni/macOSUpd10.13.2SupplementalPatch.pkg


http://swcdn.apple.com/content/downloads/01/34/091-58876/ug5y3ezyagdvc2q89229x9wyripp4v22ni/BridgeOSBrain.pkg


http://swcdn.apple.com/content/downloads/01/34/091-58876/ug5y3ezyagdvc2q89229x9wyripp4v22ni/BridgeOSUpdateCustomer.pkg


http://swcdn.apple.com/content/downloads/01/34/091-58876/ug5y3ezyagdvc2q89229x9wyripp4v22ni/FullBundleUpdate.pkg


http://swcdn.apple.com/content/downloads/01/34/091-58876/ug5y3ezyagdvc2q89229x9wyripp4v22ni/macOSUpd10.13.2Supplemental.RecoveryHDUpdate.pkg


10.13.2 supplemental update specifically for the iMac Pro:


(note only the iMac Pro gets the macos brain, and this time only the iMac Pro gets the embedded os firmware and firmware update)

http://swcdn.apple.com/content/downloads/56/06/091-58872/j53u0hawoeewmv1p41dv9579bnsgmn3d9z/macOSBrain.pkg


http://swcdn.apple.com/content/downloads/56/06/091-58872/j53u0hawoeewmv1p41dv9579bnsgmn3d9z/macOSUpd10.13.2iMacProSupplemental.pkg


http://swcdn.apple.com/content/downloads/56/06/091-58872/j53u0hawoeewmv1p41dv9579bnsgmn3d9z/macOSUpd10.13.2iMacProSupplementalPatch.pkg


http://swcdn.apple.com/content/downloads/56/06/091-58872/j53u0hawoeewmv1p41dv9579bnsgmn3d9z/FirmwareUpdate.pkg


http://swcdn.apple.com/content/downloads/56/06/091-58872/j53u0hawoeewmv1p41dv9579bnsgmn3d9z/EmbeddedOSFirmware.pkg


http://swcdn.apple.com/content/downloads/56/06/091-58872/j53u0hawoeewmv1p41dv9579bnsgmn3d9z/FullBundleUpdate.pkg


http://swcdn.apple.com/content/downloads/56/06/091-58872/j53u0hawoeewmv1p41dv9579bnsgmn3d9z/macOSUpd10.13.2iMacProSupplemental.RecoveryHDUpdate.pkg


And here is a funny trick. Replace the file extension pkg with pkm in these links and download the pkm file for macOSUpd10.13.2Supplemental.pkg and macOSUpd10.13.2iMacProSupplemental.pkg, i.e., macOSUpd10.13.2Supplemental.pkm and macOSUpd10.13.2iMacProSupplemental.pkm and open the pkm files with textedit and you can see the new build numbers somewhere near the top - BEFORE applying the update.

So you can get these pkm files here:


http://swcdn.apple.com/content/downloads/01/34/091-58876/ug5y3ezyagdvc2q89229x9wyripp4v22ni/macOSUpd10.13.2Supplemental.pkm


and


http://swcdn.apple.com/content/downloads/56/06/091-58872/j53u0hawoeewmv1p41dv9579bnsgmn3d9z/macOSUpd10.13.2iMacProSupplemental.pkm


It is 17C205 for most macs except the iMac Pro and 17C2205 for the iMac Pro.



safari 11.0.2 for sierra:



http://swcdn.apple.com/content/downloads/15/04/091-57952/xmc5ov2r2br3kxko4twuee5e2eyglb7wua/Safari11.0.2Sierra.pkg


safari 11.0.2 for el capitan:


http://swcdn.apple.com/content/downloads/23/39/091-57783/avz9r6qxtzo5kcqa1cgip0haqgpvsmsyjw/Safari11.0.2ElCapitan.pkg

EDIT: Apple have now released new links for the supplemental update:

For macs other than iMac Pro: https://support.apple.com/kb/DL1951?viewlocale=en_US&locale=en_US

For iMac Pro: https://support.apple.com/kb/DL1950?viewlocale=en_US&locale=en_US

These should be easier to install than the version previously posted above because they have combined the 6 or 7 installers into a single one.
Rating: 6 Votes
9 months ago

Sigh mine seems to be stuck on the install screen


Leave it alone..the progress bar will finally give you a countdown during the last 18 minutes. Seems like it took 25 minutes or so to complete here.
Rating: 6 Votes

[ Read All Comments ]