Sophos For Mac High Sierra

Oct 05, 2017  High Sierra is out. Now it’s time to install it on anything but a Mac. The first rig I got to run High Sierra is this cute and tiny silver build with an ASUS motherboard. High Sierra adds some pretty useful features like a log out button. The only downside I’ve noticed so far is that the screen waking can be a little slower then on Sierra. I have no issues with Office 2011 working under High Sierra 13.3.3 on my Late 2012 Mac Mini (2.6 GHz Intel Quad Core i7). In fact, Word, Excel and PowerPoint run faster than Office 2016 (I don’t use Outlook). Aug 12, 2018  How to Turn Off the Firewall on a Mac. The steps in this guide were performed on a MacBook Air in the MacOS High Sierra operating system. The steps for disabling a firewall on a Mac can vary if you are using a different version of macOS. Step 1: Click the System Preferences icon.

There’s nothing like the release of a new operating system to put apps to the test. Unsurprisingly, some Rocket Yard readers have reported that specific apps are not playing well with High Sierra. Here’s our current list, and please feel free to leave a comment at the bottom of the post with information on any apps you may have that don’t work properly with High Sierra installed. (Related:Common Problems During and After macOS High Sierra Installation)

Mac

Apple Apps
Would you believe that some Apple apps need to be updated to a new version to work properly with macOS High Sierra? While the iWork apps (Pages, Keynote, and Numbers), built-in apps (Mail, Safari, etc…) and iLife (iMovie, Photos, GarageBand, etc…) apps are working well with High Sierra, the Pro apps need to be updated to the latest versions. Here are links to the Mac App Store where the latest version can be found:

Note: If your Mac isn’t new enough to support Mojave or High Sierra, upgrade as far as you can. For example, El Capitan (10.11) is still available for 2007-2009 Macs running older versions such as Snow Leopard (10.6). Keep your apps up to date, too. Give attackers fewer opportunities to find vulnerabilities. Applies to: Sophos Home Premium and Free (Mac) You are trying to load the Sophos Home kernel extension (KEXT) via System Preferences, but the Allow button does not respond when clicked. On macOS High Sierra 10.13+, some mouse or trackpad customization tools conflict with the System Preferences pane. This causes the Allow button to not work, especially if it is clicked through screen.

  • Final Cut Pro X 10.3.4
  • Motion 5.3.2
  • Compressor 4.3.2
  • Logic Pro X 10.3.1
  • MainStage 3.3

Adobe Apps
Adobe suggests that any Creative Cloud versions of its apps be updated to the latest version (this is generally a good practice anytime updates are available). Most ‘CC apps’ should run smoothly with High Sierra, but some issues have been reported, in particular with Illustrator CC 2017 and InDesign CC 2017.

Illustrator suffers from multiple issues, one of which can cause installation and application launch failures; others have workarounds. InDesign suffers from cursor corruption issues, which may vary in frequency or severity depending on hardware. Photoshop has an issue related to Full Screen usage but Adobe has already supplied a file that can be downloaded and installed to fix it. For all Adobe-related issues, please visit their official support pages for the latest information.

For CS6 and earlier versions of the suite, the best information we have is that they are not officially supported with 10.13. They may install and work properly or they may not, but in any case no updates are likely to be provided.

Microsoft Office
As noted in an earlier report on macOS High Sierra, Office 2011 is not supported in High Sierra. While some of the apps may still work, there is a good chance they will not based on the information we’ve seen. Note also that Microsoft will no longer support Office 2011 after October 10, 2017, so if you would like to continue using an officially supported version, your only option will be to upgrade to Office 2016 (version 10.35 or higher — current version as of this writing is 15.38).

You can check the version number for Office 2016 by opening any of the apps (Excel, Word, PowerPoint, etc…) and selecting the “About Excel/Word/…” item from the app menu (see screenshot at right).

Microsoft Auto Update was also reported as having some issues.

Summary of Apps with Verified Compatibility Issues as of 9/27/2017

  • Wacom tablet drivers: 10.13-aware drivers not available until late October. This could impact many Creative Suite users.
  • Adobe Illustrator CC 2017 (serious – fix likely to require application update)
  • InDesign CC 2017 (variable – fix likely to require Apple update)
  • Photoshop CC 2017 (minor – Adobe fix available now)CS6 and earlier suites: as far as we know, none are officially compatible with 10.13. No further fixes or updates likely.Affinity Photo – should work but no official statement yetAffinity Design – should work but no official statement yetFinal Cut Pro X – 10.3.4 or laterMotion – 5.3.2 or laterCompressor – 4.3.2 or laterLogic Pro X – 10.3.1 or laterMainStage – 3.3 or laterApps from previous versions of Final Cut and Logic Studio are not compatible. They include: DVD Studio Pro, Soundtrack Pro, Color, Cinema Tools, WaveBurner, Studio Instruments, Studio Effects, Apple Loops, Apple Loops Utility, Impulse Response UtilityCarbon Copy Cloner (CCC) 4 – limited support onlyCCC5 – fully supports 10.13; this version should be used in a mixed volume (HFS+ and APFS) environment.Disk Warrior 5 – Will run on the OS but APFS volumes not yet supported. (Disk Warrior 4 stopped working with 10.11).MS Office 2011 – not supported and MS will end all official support 10/10/17.MS Offie 2016 – versions 15.35 and later onlyFileMaker Pro – if you are using version 14 or earlier, check with FileMaker before upgrading to macOS 10.13.1 Password – version 6 or later

Other Apps Reported to Have Issues as of 9/27/2017

  • Airfoil for Mac
  • Audacity
  • Audio Hijack
  • Autodesk AutoCAD 2017
  • Bear
  • beaTunes
  • Civilization V
  • CodeWeavers CrossOver (and any apps that use it)
  • DiskWarrior 5.0 (does not support APFS; should work properly on any High Sierra device that has not been converted to APFS)
  • FileMaker Pro 11.0.4 and earlier
  • Firefox
  • Intego Backup Manager Pro
  • Intego FileGuard
  • Intego Internet Security Barrier X6
  • Intego NetBarrier X5/X8
  • Intego Personal Antispam
  • Intego VirusBarrier 10.7.3/Express/Plus
  • Loopback
  • Mailplane
  • Malwarebytes Anti-Malware
  • McAfee Endpoint Security for Mac
  • nvALT
  • OnyX
  • Path Finder
  • Snapz Pro X
  • Sophos AV
  • SuperDuper!
  • TechTool Pro

Users Who Might Want to Think Twice Before Upgrading

  • All users heavily dependent upon Wacom tablets for their work or computer use
  • Illustrator CC 2017 users
  • InDesign CC 2017 users
  • Users of earlier versions of Creative Suite (CS6 or earlier) who don’t plan on changing that setup
  • MS Office 2011 users who don’t plan to upgrade to a free office suite, G Suite, or Office 2016 15.35 or later
  • Carbon Copy Cloner v4 or earlier users who don’t plan to upgrade to version 5.
  • Disk Warrior users
  • Anyone using older versions of the Final Cut Studio and Logic Studio who doesn’t want to move up to Final Cut Pro X apps or Logic Pro X apps.

As noted earlier, please let us know if you run into any compatibility issues with your favorite Mac apps by leaving a comment below. In addition, if you hear about a new version of any of the apps listed here that resolves High Sierra compatibility issues, please comment as well.

• OWC Dan contributed to this article

Be Sociable, Share This!

Prices, terms, and availability subject to change without notice. Not responsible for typographical, technical, or descriptive errors of products herein.
OWC is on-site wind turbine powered at 8 Galaxy Way, Woodstock, IL 60098 1-800-275-4576 +1-815-338-8685 (International)
All Rights Reserved, Copyright 2018, OWC – Since 1988

Apple has just blasted out 11 email advisories detailing its most recent raft of security fixes.

Confusingly, some of these updates have been available for several days already – the most recent version of iOS is 13.5, and it was officially announced on Apple’s main Security update page on 20 May 2020.

In fact, the updates listed for iOS and watchOS are still flagged [2020-05-27T12:00Z] with the words “details available soon“, even though Apple’s Security Advisories have full details.

And Apple’s updates for its non-mobile software products are covered in detail in the Advisory emails, but are not yet mentioned at all on the HT201222 security page.

For completeness, the updates are numbered APPLE-SA-2020-05-25-1 to APPLE-SA-2020-05-25-11, and cover:

The bug fixed in Windows Migration Assistant seems to be a DLL loading flaw that affects the Windows version of the software – an app that might, ironically, be the last Windows program you ever need to run.

Note that DLL loading errors generally don’t allow attackers to perform what’s called remote code execution (RCE), but merely to trick you into using a legitimate program to load up an untrusted component that’s has already been downloaded locally onto your computer.

Disk

Sophos Home Mac

So crooks may be able to use this sort of bug to finish off an attack (or to make an existing intrusion worse), but not to break in to start with.

What was fixed?

We counted 63 distinct CVE-tagged vulnerabilities in the 11 advisory emails.

We shan’t go over every one of them here, but we’ll note that 11 of these vulnerabilities affected software right across Apple’s mobile, Mac and Windows products.

This is a reminder that vulnerabilities in cross-platform programming libraries may require vendors to put out updates for all the platforms on which that library is used.

Bugs such as buffer overflows and use-after-free errors can’t always be exploited on every platform, and even if they can, each variant of the exploit might need a lengthy phase of experimentation all of its own.

Nevertheless, where there’s a memory mismanagement flaw that can be triggered by remotely-supplied content, it’s wise to assume that if exploitation is possible on one platform, it can probably be figured out for other platforms, too.

For each patched bug, Apple lists its possible impact, so we filtered all the Impact: lines out of the 11 different advisories to give you an idea of the range of different issues fixed, which came to 41 in all.

We’ve shortened some of the lines slightly to make them easier to read, but the variety of bugs fixed in this round of patches is clear:

What does this mean?

The silver lining here is that the length of the list and the variety of bugs shown above isn’t a sign of security weakness.

It’s tempting to look at a list like the one above, or the list of 114 vulnerabilities fixed by Microsoft in this month’s Patch Tuesday, as a sign that things are getting worse.

But by that argument, a company that never puts out updates at all and thus keeps its vulnerability count at zero, would come out as perfectly secure, even though it’s likely that such a company isn’t finding bugs because it carefully isn’t looking, rather than because it’s looking carefully.

Sophos Home Premium For Mac

Instead, you can see the breadth and depth of today’s “here’s what we just patched” lists as a sign of cybersecurity maturity and of ever-increasing attention to detail.

Sophos For Mac Home Edition

That’s because bugs don’t go as far as they used to for attackers, who often need to combine multiple flaws in order to pull off remote code execution exploits.

Sophos For Mac High Sierra Installer

For example, bugs that can reliably crash apps with remotely supplied data often can’t easily be “weaponised”, or used to cause a crash that ends reliably in code execution.

Attackers may need to use a memory disclosure bug first, to figure out what programs are loaded where, without which their later attempt to exploit a code execution bug might crash completely instead of taking over control.

And attackers might need to mix a privilege elevation bug in there too, or a sandbox escape, otherwise they might end up with an attack that is so constrained in what it can see and do that they might as well not have bothered.

So the days of occasional patches only for the most serious bugs labelled “remote code execution” are over.

What to do?

Sophos For Mac High Sierra Download

Regular patching of all reported issues, even those that sound unimportant on their own, is a must…

…so we are going to say what we’ve always done, and that is, “Patch early, patch often.”

Even if you have set your Mac or your iDevice to update automatically, make a point of checking regularly that you really are up to date:

Sophos For Mac High Sierra Os

  • On a Mac, go to System Preferences > Software Update.
  • On an iPhone or iPad, go to System > General > Software Update.

Latest Naked Security podcast

LISTEN NOW

Click-and-drag on the soundwaves below to skip to any point in the podcast. You can also listen directly on Soundcloud.