What happened to macOS in last week’s updates?
Last week’s security updates to macOS have left some confusion over version numbers, and firmware for T2 Macs. This article attempts to clarify what happened, and where supported versions of macOS are going next.
Security updates 11 March 2025
Apple released:
macOS 15.3.2 Sequoia
Safari for macOS 14.7.4 Sonoma
Safari for macOS 13.7.4 Ventura.
There were no security updates for Sonoma or Ventura other than their Safari updates.
There was also a firmware update included in the 15.3.2 update, changing the version of iBridge firmware in the T2 chip of Intel Macs from 22.16.13051.0.0,0 to 22.16.13060.0.0,0. There were no firmware updates for Apple silicon Macs, nor for Intel models without T2 chips, I understand.
Sequoia
If your Mac is running macOS Sequoia and has been updated, it should now be running 15.3.2 (build 24D81). If it has a T2 chip, it should have updated its firmware to read
EFI 2069.80.3.0.0 (iBridge: 22.16.13060.0.0,0)
Safari should be version 18.3.1 (20620.2.4.11.6).
Sonoma
If your Mac is running macOS Sonoma and has been updated, it should still be running 14.7.4 (build 23H420). If it has a T2 chip, its firmware should remain at
EFI 2069.80.3.0.0 (iBridge 22.16.13051.0.0,0)
Safari should have been updated to version 18.4 (19621.1.14.11.3, 19621).
Ventura
If your Mac is running macOS Ventura and has been updated, it should still be running 13.7.4 (build 22H420). If it has a T2 chip, its firmware should remain at
EFI 2069.80.3.0.0 (iBridge 22.16.13051.0.0,0)
Safari should have been updated to version 18.4 (18621.1.14.11.3, 18621).
SilentKnight
To keep a complex situation as simple as possible, SilentKnight only considers one firmware version to be current for each model of Mac. If it tried anything more complex, I’d not be able to cope. As there are presently two different ‘current’ and supported versions of T2 firmware in use, SilentKnight goes with the older one. That way it doesn’t complain, but politely remarks for Sequoia 15.3.2:
EFI version found 2069.80.3.0.0 (iBridge: 22.16.13060.0.0,0) ;
expected 2069.80.3.0.0 (iBridge 22.16.13051.0.0,0)
Please bear with me until Apple resyncs T2 firmware across the three supported versions of macOS. I’m sure that will return with the release of 15.4, 14.7.5 and 13.7.5. If not, we can all scream together.
Sonoma 14.7.5 and Ventura 13.7.5
Many have been reporting that their Macs have been updated to 14.7.5 or 13.7.5, and some have claimed that those versions have been released by Apple. They are in fact beta-releases of the next scheduled updates to Sonoma and Ventura, and haven’t yet been generally released. If your Mac is running one of those, you might like to check it against recent beta-releases:
21 February 2025 betas: Sonoma 14.7.5 (23H510), Ventura 13.7.5 (22H510)
10 March 2025 betas: Sonoma 14.7.5 (23H520), Ventura 13.7.5 (22H520)
17 March 2025 betas: Sonoma 14.7.5 (23H525), Ventura 13.7.5 (22H525)
App Store full installers
If you download a full installer from the App Store or elsewhere, the current releases are:
Sequoia 15.3.2 (build 24D81)
Sonoma 14.7.4 (build 23H420), which will then need Safari updated
Ventura 13.7.4 (build 22H420), which will then need Safari updated.
How has this happened?
Normally, when the current version of macOS has a security update, the two older versions that are still supported have matching security updates. That would have brought 14.7.5 and 13.7.5 along with 15.3.2. However, in this case the patch to be applied could be supplied in a Safari update for the older two. As that’s much smaller and simpler than a full macOS update, Apple opted to supply those as Safari updates alone, which can’t of course be a new version of macOS.
This is possible because Safari and some of its supporting frameworks and components aren’t part of the Signed System Volume, so updating them doesn’t require the System volume to be rebuilt, turned into a snapshot, and installed as a new Signed System Volume.
However, firmware updates can only be supplied and installed as part of a full macOS update, so it was only possible to update T2 firmware in Sequoia systems being updated the long way to 15.3.2.
I hope this dispels any remaining confusion.