#Apple security update 2017 install
#Apple security update 2017 download

In Directory Utility’s menus, you should now see the command to enable the root user. In the next dialog, click on the button to Open Directory Utility, then click on its padlock and authenticate again. You can do that through the Users & Groups pane: authenticate as the admin user, click on Login Options at the lower left, and click on the Join button by Network Account Server in the lower section of the pane. Once your Mac is up and running again, check that the root user is now disabled. Do not despair: this is just a little cleaning up which needs to be done to disable the root user ready for when you login after the restart. The shutdown before that restart takes some time, during which your Mac will show a black screen.

It does not restart your Mac automatically, and I recommend users to restart as soon as they can after they have installed it. This update is small, just over 1 MB, and installs fairly quickly. Good for Apple to release this within 24 hours of the vulnerability become generally known, although none of this should ever have happened in the first place. Once installed, High Sierra users should then be able to disable the root user in safety, if the update doesn’t already do so.Īpple also confirms that this does not affect Sierra 10.12.6 or earlier versions of macOS or OS X. This was addressed with improved credential validation.”

#Apple security update 2017 download

You can also download a standalone installer package from here.Īpple’s summary of the bug reads: “A logic error existed in the validation of credentials.

#Apple security update 2017 install

Apple has just released a security update, the first for High Sierra 10.13.1, which it claims fixes the gaping hole recently discovered in authentication, which allowed the use of the root username with a blank password.Īll those using High Sierra should install this update from the App Store as a matter of urgency on all systems running High Sierra.