The Safari 15.3 release on 2022-02-10 marks what I believe is the 3rd time in a little less than a year that Apple has released an update to Safari with the same version number as the previous release but with a new build number. This means that the CFBundleShortVersionString normally used to identify an app version is useless to determine the actual version of Safari 15.3 installed.
For anyone who wants to create a Smart Group that can differentiate between Safari releases with the same version the EA below will extract the CFBundleVersion value, which is the Build number, from the Safari application bundle so you can use it as a Criteria.
For the new Safari 15.3 release the build number is 16612.4.9.1.8 on macOS Big Sur and 15612.4.9.1.8 on macOS Catalina.
<?xml version="1.0" encoding="UTF-8"?><extensionAttribute>
<displayName>EA - Get Safari CFBundleVersion</displayName>
<description>Get the full version string for Safari.app since Apple has made the CFBundleShortVersionString useless by repeatedly reusing the same value with different Production builds.</description>
<dataType>string</dataType>
<scriptContentsMac>#!/bin/sh
# EA - Get Safari CFBundleVersion
result="Not Installed"
PListToCheck="/Applications/Safari.app/Contents/Info.plist"
if [ -f "$PListToCheck" ] ; then
result=$( /usr/bin/defaults read "$PListToCheck" CFBundleVersion )
fi
echo "<result>$result</result>"</scriptContentsMac>
</extensionAttribute>