Security Update 2020-006

[hoody]

Hi all,
I've just received notice of a security update as above. I'm on High Sierra with my Macbook air (mid 2013) and Mojave on the late 2012 iMac. The reason I ask is that I don't want to end up with Catalina or Big Sur. Is this a safe update as far as that goes?

 

[ferrarr]

You should be good to go. It's a security update.

Apple security releases

This document lists security updates and Rapid Security Responses for Apple software.

support.apple.com

Even if you were to download Catalina or Big Sur, you would need to initiate the upgrade yourself.

 

[toMACsh]

If you want to stay away from Catalina and Big Sur, upgrades are what you want to avoid. Updates just tweak your current OS. Apple will never call an upgrade an update.

 

[hoody]

Thanks to both of you. I asked because I remember someone on this forum did an update and had a fair bit of trouble afterwards.

 

[toMACsh]

Yes, the 2020-005 update for Mojave as originally released had a bug in it. That is a rare occurrence. Apple had it fixed within a couple of weeks.

 

[hoody]

Thanks. I've installed it and it seems to be all right.

 

[poolcoinshop]

Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave
Released November 12, 2020

FontParser

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6
Impact: Processing a maliciously crafted font may lead to arbitrary code execution. Apple is aware of reports that an exploit for this issue exists in the wild.
Description: A memory corruption issue was addressed with improved input validation.
CVE-2020-27930: Google Project Zero

Kernel

Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6
Impact: A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of reports that an exploit for this issue exists in the wild.
Description: A type confusion issue was addressed with improved state handling.
CVE-2020-27932: Google Project Zero