macOS Monterey still vulnerable to CVE-2022-40303

theptip wrote: post #3

hanafudafan wrote: post #2

I'll just install the update myself.

As the article notes, not all models have that option. 2017-or-later is the cutoff now I believe. Sure, take the upgrade if you can though.

Who can stop me from compiling and installing some software though?

Re: macOS Monterey still vulnerable to CVE-2022-40303

#6

Post by saghm » Sat, Dec 03, 2022, 8:17 PM UTC

hanafudafan wrote: post #5

theptip wrote: post #3

Earlier quoted context omitted.

As the article notes, not all models have that option. 2017-or-later is the cutoff now I believe. Sure, take the upgrade if you can though.

Who can stop me from compiling and installing some software though?

Installing the newer versions won't make the old ones go away though, and there are presumably a lot of built-in things linking to the old versions.

Re: macOS Monterey still vulnerable to CVE-2022-40303

#7

Post by bobbylarrybobby » Sat, Dec 03, 2022, 8:42 PM UTC

I wonder if the just-released Monterrey 12.6.2 fixes this

Re: macOS Monterey still vulnerable to CVE-2022-40303

#8

Post by dustyharddrive » Sat, Dec 03, 2022, 10:19 PM UTC

password4321 wrote: post #4

OpenCore Legacy Patcher https://news.ycombinator.com/item?id=32614135 https://github.com/dortania/OpenCore-Legacy-Patcher/#opencor... Not quite 100% on topic but useful for those with unsupported hardware.

A bunch of blobs go into OCLP, sometimes with no source, so I’m hesitant about it. Are there any projects to build everything from code that is public? (will have at least reduced hardware support though)

Re: macOS Monterey still vulnerable to CVE-2022-40303

#9

Post by musicale » Sat, Dec 03, 2022, 11:00 PM UTC

> Why don't all Mac users just update to Ventura? Well, some of them can't. Ventura dropped support for a number of Mac models: compare Ventura with Monterey system requirements

:(

I expect that intel Macs don't have much steam left in terms of macOS upgrades. The first x86 Macs shipped in 2006 and Apple dropped PowerPC support with 10.6 Snow Leopard in 2009.

I assume anyone who bought a Power Mac G5 in 2006 knew what they were getting into.

Re: macOS Monterey still vulnerable to CVE-2022-40303

#10

Post by theptip » Sun, Dec 04, 2022, 4:35 AM UTC

hanafudafan wrote: post #5

theptip wrote: post #3

Earlier quoted context omitted.

As the article notes, not all models have that option. 2017-or-later is the cutoff now I believe. Sure, take the upgrade if you can though.

Who can stop me from compiling and installing some software though?

Sure, you can side-load it. Stuff might break since the OS makes assumptions about the hardware.