Catalina 10.15.7 Supplemental Update Addresses 3 Exploits, 1 found in the wild!
Catalina 10.15.7 Supplemental Update (19H15) Released!

	

	
	
	
		
10.15.7 Supplemental Update (19H15) Released!



macOS Catalina 10.15.7 Supplemental Update is now Available.



UPDATE 11/11/20: Apple has just released a full installer for macOS Catalina 10.15.7 that includes the Supplemental Update Security Fixes! No word of an updated combo update or a downloadable pkg yet. I will update if they become available!



Today Apple released the 6th Supplemental Update for macOS Catalina. With the release of 10.15.7, we thought Apple would continue with an easy way to identify updates. The 10.15.7 Supplemental update seemed to dash those hopes. The update does not even list any fixes in it. The only wording is



“macOS Catalina 10.15.7 Supplemental Update is recommended for all users and improves the security of macOS”



This tells us that the update only has security related fixes in it!



https://support.apple.com/en-us/HT211947



In the security link, Apple calls out 3 security vulnerabilities. I will go over them below.





Mr. Macintosh Catalina 10.15.7 Supplemental Update Video



The macOS Catalina 10.15.7 Update includes the following Security fixes.



macOS Catalina 10.15.7 Supplemental Update provides important security updates for your Mac.



This update is an important update due to this quote from Apple



A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of reports that an exploit for this issue exists in the wild.Apple 



The Supplemental Update patches the followingFontParser arbitrary code execution = Found in the wild!!!Two Kernel Exploits = Both found in the wild!!!All three vulnerabilities have been reported to Apple from the Google Project Zero Team.



Treat this Supplemental Update as a High Priority!



Confusing Update Situation



We have a couple update scenarios that we need to discuss. Normally Apple releases new Delta and Combo Updates. This time we only have a delta update for 10.15.6 users. If you have anyone on 10.15.0-10.15.5 they will be offered the OLD 10.15.7 (19H2) Update. They will have to install the 10.15.7 Supplemental Update after!



10.15.7 users = NEW 10.15.7 Supplemental Update10.15.6 users = NEW 10.15.7 Delta Update10.15.0-10.15.5 users  = OLD 10.15.7 Combo Update – Will need to install the 10.15.7 Supplemental Update after.10.15.7 Full Installer = Remains OLD 10.15.7 (19H2) version and will need to install the 10.15.7 Supplemental Update after.



Hat Tip to my fellow Software Update Investigator Eric Holtam! Follow him on Twitter @eholtam



Apple’s Public Patch Notes / Release Notes Documentation



NOTE: Apple Documentation takes a little while to show up online after release. I will update when the new articles are made available.



https://support.apple.com/en-us/HT210642



developer.apple.com/documentation/macos_release_notes



developer.apple.com/documentation/macos-release-notes/macos-catalina-10_15_6-release-notes



For more detailed information about this update and previous updates, please visit: https://support.apple.com/kb/HT210642



Previous 10.15 Releases + Previous Patch Notes



22. 10.15.7 = (19H15) – Supplemental Update – Nov 5th 202021. 10.15.7 = (19H2) – Update – Sep 24th 202020. 10.15.6 = (19G2021) – Supplemental Update – Aug 12th 202019. 10.15.6 = (19G2006) – 2020 iMac Fork Re-Released – Aug 4th, 202018. 10.15.6 = (19G2005) – 2020 iMac Fork – Aug 4th, 2020 17. 10.15.6 = (19G73) – July 15th, 202016. 10.15.5 = (19F2200) – 16″ MBPro Update Fork – June 15th 202015. 10.15.5 = (19F2096) – 16″ MBPro Shipping Fork – June 15th 202014. 10.15.5 = (19F101) – Supplemental Update – June 1st, 202013. 10.15.5 = (19F96) – May 26, 202012. 10.15.4 = (19E2269) – 13″MBPro Shipping Fork – May 6th 202011. 10.15.4 = (19E287) – Supplemental Update – April 8th, 202010. 10.15.4 = (19E266) – March 24th 20209. 10.15.3 = (19D2064) – MBAir Shipping Fork March 23rd 20208. 10.15.3 = (19D76) – January 28th 20207. 10.15.2 = (19C57) – December 10th 20196. 10.15.1 = (19B2106) – 16″ MBPro Update Fork – November 13th 20195. 10.15.1 = (19B2093) – 16″ MBPro Shipping Fork – Nov 13th 20194. 10.15.1 = (19B88) – October 29th 20193. 10.15.0 = (19A603) – Supplemental Update Re-Released – Oct 21st 20192. 10.15.0 = (19A602) – Supplemental Update – October 15th 20191. 10.15.0 = (19A583) – October 7th 2019



macOS Catalina 10.15.7 Supplemental Update Changes, Info & Download Links



Supplemental Update



The “Supplemental Update” update is smaller in size because it only includes fixes for the previous point release only.



NOTE: The Supplemental update is ONLY for 10.15.7 Users



Download Link – waiting 



Size = 1.21 GB



Product ID = 001-73001



Requirements = 10.15.7



Delta Update



The “Delta” update is smaller in size because it only includes fixes for the previous point release only.



NOTE: The Delta update is ONLY for 10.15.6 Users



Download Link – waiting 



Size = 2.84 GB



Product ID = 001-57230



Requirements = 10.15.6



Combo Update



The “Combo” update is for all previous versions of Catalina.



Download Link – NONE! combo update is not available as this update is ONLY for 10.15.7 users. 



Size = 



Product ID = 



Requirements = 



Full Installer.app



It looks like a full installer was NOT released! Will update …



Below is the OLD VERSION (19H2)



Link – Catalina 10.15.7 Mac App Store



Size = 8.75 GB



Product ID = 001-51042



Requirements – 10.15 Catalina Requirements



T2 BridgeOS Update



UPDATE! T2 BridgeOS was updated!



Size = 417.7 MB



Product ID = 001-51038



BridgeOS Update Version = 17.16.16610.0.0



3. Previous 10.15.7 Update = 17.16.16610 = BuildVersion 62. Previous 10.15.6 Supplemental Update = 17.16.166101. Previous BridgeOS Update Version = 17.16.16065



Security Content of macOS Catalina 10.15.7 Update.



This document lists security updates for Apple software.



support.apple.com/en-us/HT201222



MacOS Catalina 10.15.7 Supplemental Update



https://support.apple.com/en-us/HT211947



The following security fixes are included in Catalina 10.15.7.



Released November 5, 2020



FontParser



Available for: macOS Catalina 10.15.7



Impact: Processing a maliciously crafted font may lead to arbitrary code execution. Apple is aware of reports that an exploit for this issue exists in the wild.



Description: A memory corruption issue was addressed with improved input validation.



CVE-2020-27930: Google Project Zero



Kernel



Available for: macOS Catalina 10.15.7



Impact: A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of reports that an exploit for this issue exists in the wild.



Description: A type confusion issue was addressed with improved state handling.



CVE-2020-27932: Google Project Zero



Kernel



Available for: macOS Catalina 10.15.7



Impact: A malicious application may be able to disclose kernel memory. Apple is aware of reports that an exploit for this issue exists in the wild.



Description: A memory initialization issue was addressed.



CVE-2020-27950: Google Project Zero



Catalina 10.15.7 Supplemental Update
Liked it? Take a second to support Mr. Macintosh on Patreon!	

	
