Skip to main content
Question

Safari 16.3.1 Standalone Installers

  • February 13, 2023
  • 31 replies
  • 274 views
sdagley
Forum|alt.badge.img+25

For anyone that prefers to make Safari updates available via Self Service, here are the standalone installer download links extracted from Apple's Software Update Server catalog for what Apple's  Security update bulletins published today are calling Safari 16.3.1. Unfortunately what Apple actually released today were new builds of Safari 16.3 with updated Build numbers. This means you'll have to use an EA to extract the CFBundleVersion string from the Safari app bundle to figure out exactly what version of Safari you have installed (also posted below).

Safari "16.3.1" for macOS Big Sur: http://swcdn.apple.com/content/downloads/30/47/032-38743-A_CT6YB7IU0E/etlliehrvoqmlrb8mso9d2lh8vtnb59e0o/Safari16.3BigSurAuto.pkg

Safari "16.3.1" for macOS Monterey: https://swcdn.apple.com/content/downloads/61/07/032-38754-A_I6L5FGHO4W/6vezgtgkabm4112wd26y1moii3kak18ykb/Safari16.3MontereyAuto.pkg

EA to report Safari CFBundleVersion:

 

#!/bin/sh # EA - Get Safari CFBundleVersion result="Not Installed" PListToCheck="/Applications/Safari.app/Contents/Info.plist" if [ -f "$PListToCheck" ] ; then result=$( /usr/bin/defaults read "$PListToCheck" CFBundleVersion ) fi echo "<result>$result</result>"

 

      31 replies

      mvu
      Forum|alt.badge.img+20
      • mvu
      • Jamf Heroes
      • February 14, 2023

      Why Apple? Why.

        piotrr
        Forum|alt.badge.img+8
        • piotrr
        • Contributor
        • February 14, 2023

        Again we are reminded of how badly unable we are to force updates on Mac users. 

          sdagley
          Forum|alt.badge.img+25
          • sdagley
          • Author
          • Jamf Heroes
          • February 14, 2023

          Why Apple? Why.


          Given that this is not the first time this has happened with a Safari release (I forget if it's the 3rd or 4th time) and the complete lack of reliability in the macOS software update mechanism the past couple of macOS generations it does make one wonder if there is any adult supervision for Apple's software releases. Yes I'm grumpy, but I've been working on Macs since you had to have a Lisa to write software for them and I'm not happy with Apple's current level of attention to detail.

            AJPinto
            Forum|alt.badge.img+26
            • AJPinto
            • Legendary Contributor
            • February 14, 2023

            Again we are reminded of how badly unable we are to force updates on Mac users. 


            We don't manage devices over here, that is not the Apple Way. We politely herd sheep to do the right thing.

            AJPinto
            Forum|alt.badge.img+26
            • AJPinto
            • Legendary Contributor
            • February 14, 2023

            Why does this not surprise me. 

            piotrr
            Forum|alt.badge.img+8
            • piotrr
            • Contributor
            • February 15, 2023

            We don't manage devices over here, that is not the Apple Way. We politely herd sheep to do the right thing.


            Apple offers full management of supervised, company owned prestage ADE registered Macs through MDM unless - of course - the current user doesn't want to. 

            piotrr
            Forum|alt.badge.img+8
            • piotrr
            • Contributor
            • February 15, 2023

            So which build numbers are we talking about? 

            On macOS 13.2.1 I am seeing

            • 18614.4.6.1.6
            • 18614.4.6.1.5
            • 18614.2.9.1.12
            • 18614.3.7.1.5

            On macOS 12 I am seeing 

            • 17614.4.6.11.6 
            • 17614.3.7.1.7
            • 17614.1.25.9.10 

            Just going with a hunch that the highest numbers are the correct latest patches and when there's a discrepancy (like 13.2.1 with older build) this could be because OS numbers are sent through the new declarative management status channel, while the CFBundle ID has to be extracted programmatically by the EA script, with a delay. 

            SMR1
            Forum|alt.badge.img+13
            • SMR1
            • Valued Contributor
            • February 15, 2023

            I did install it on our test devices and the version changed, but in Jamf, it's labeling it 16.3.1 in patch management. When I look at the installs for this, it shows zero. I'm assuming because it's not technically called 16.3.1.

            AJPinto
            Forum|alt.badge.img+26
            • AJPinto
            • Legendary Contributor
            • February 15, 2023

            Apple offers full management of supervised, company owned prestage ADE registered Macs through MDM unless - of course - the current user doesn't want to. 


            I got an email from JSS this morning at 3:41a that a patching definition for Apple Safari v16.3.1 was added.

             

            It was not there yesterday. I was annoyed that I had to downgrade all my patching definitions so I could replace the 16.3 package with the 16.3.1 package. I figured it best to get the vulnerable package out of the mix.

            D
            Forum|alt.badge.img+11
            • daniel_behan
            • Valued Contributor
            • February 15, 2023

            Apple left the Version to be 16.3* instead of 16.3.1, so patch management will be inaccurate.

            https://support.apple.com/en-us/HT213638

            After installing this update, the build number for Safari 16.3 is 167614.4.6.11.6 on macOS Big Sur and 177614.4.6.11.6 on macOS Monterey.

              D
              Forum|alt.badge.img+11
              • daniel_behan
              • Valued Contributor
              • February 15, 2023

              Even Apple's Article appears incorrect.  I'm seeing the following build IDs as the latest:

              macOS Ventura
              Bundle ID 18614.4.6.1.6

              macOS Monterey
              Bundle ID 17614.4.6.11.6

              macOS Big Sur 16614.4.6.11.6

                S
                Forum|alt.badge.img+1
                • steven_z
                • New Contributor
                • February 15, 2023

                So which build numbers are we talking about? 

                On macOS 13.2.1 I am seeing

                • 18614.4.6.1.6
                • 18614.4.6.1.5
                • 18614.2.9.1.12
                • 18614.3.7.1.5

                On macOS 12 I am seeing 

                • 17614.4.6.11.6 
                • 17614.3.7.1.7
                • 17614.1.25.9.10 

                Just going with a hunch that the highest numbers are the correct latest patches and when there's a discrepancy (like 13.2.1 with older build) this could be because OS numbers are sent through the new declarative management status channel, while the CFBundle ID has to be extracted programmatically by the EA script, with a delay. 


                Same here.  Not overly concerned with 11 and 12 since sdagley was able to provide those packages.  Thank you so much!!

                 

                However, I am seeing multiple different Safari builds when the OS is claiming to be upgraded to 13.2.1.  Not sure if we are compliant with remediation.

                Is it possible to get the correct Safari package for Ventura so we can update it manually?

                sdagley
                Forum|alt.badge.img+25
                • sdagley
                • Author
                • Jamf Heroes
                • February 15, 2023

                I got an email from JSS this morning at 3:41a that a patching definition for Apple Safari v16.3.1 was added.

                 

                It was not there yesterday. I was annoyed that I had to downgrade all my patching definitions so I could replace the 16.3 package with the 16.3.1 package. I figured it best to get the vulnerable package out of the mix.


                Oh it gets better. After I complained yesterday that the re-use of the Safari 16.3 version number for the new Safari releases didn't match the 16.3.1 version listed in the Security update bulletins Apple revised the Security bulletins to roll the version number back to 16.3 and add a mention of checking the Build number. <HeadExplodingEmoji/>

                AJPinto
                Forum|alt.badge.img+26
                • AJPinto
                • Legendary Contributor
                • February 15, 2023

                Oh it gets better. After I complained yesterday that the re-use of the Safari 16.3 version number for the new Safari releases didn't match the 16.3.1 version listed in the Security update bulletins Apple revised the Security bulletins to roll the version number back to 16.3 and add a mention of checking the Build number. <HeadExplodingEmoji/>


                I mean, one would have problems assuming Apple is one of the largest companies in the world making mistakes that would cause you to fail an assignment in a system analysis college course.

                mvu
                Forum|alt.badge.img+20
                • mvu
                • Jamf Heroes
                • February 15, 2023

                Oh it gets better. After I complained yesterday that the re-use of the Safari 16.3 version number for the new Safari releases didn't match the 16.3.1 version listed in the Security update bulletins Apple revised the Security bulletins to roll the version number back to 16.3 and add a mention of checking the Build number. <HeadExplodingEmoji/>


                They should call this update "Safari+". 

                Boom.

                AJPinto
                Forum|alt.badge.img+26
                • AJPinto
                • Legendary Contributor
                • February 15, 2023

                They should call this update "Safari+". 

                Boom.


                @mvu Now I want Safari Pro and Safari Max. 

                mvu
                Forum|alt.badge.img+20
                • mvu
                • Jamf Heroes
                • February 15, 2023

                @mvu Now I want Safari Pro and Safari Max. 


                You win.

                  piotrr
                  Forum|alt.badge.img+8
                  • piotrr
                  • Contributor
                  • February 16, 2023

                  Same here.  Not overly concerned with 11 and 12 since sdagley was able to provide those packages.  Thank you so much!!

                   

                  However, I am seeing multiple different Safari builds when the OS is claiming to be upgraded to 13.2.1.  Not sure if we are compliant with remediation.

                  Is it possible to get the correct Safari package for Ventura so we can update it manually?


                  Like I mentioned, that might be because you have some machines that report their version number using declarative device management, whereas the Safari build won't be updated until the next recon. 

                    mm2270
                    Forum|alt.badge.img+24
                    • mm2270
                    • Legendary Contributor
                    • February 16, 2023

                    Given that this is not the first time this has happened with a Safari release (I forget if it's the 3rd or 4th time) and the complete lack of reliability in the macOS software update mechanism the past couple of macOS generations it does make one wonder if there is any adult supervision for Apple's software releases. Yes I'm grumpy, but I've been working on Macs since you had to have a Lisa to write software for them and I'm not happy with Apple's current level of attention to detail.


                    Yup, apparently Apple has discovered there is a shortage of numbers, you know, those things that are infinite. Why they do this I just can't even wrap my head around. It's like rank incompetence. How difficult is it to give something a new proper number? Apparently very difficult for Apple.

                    A
                    Forum|alt.badge.img+1
                    • atlantamacguru
                    • New Contributor
                    • February 17, 2023

                    Safari 16.3.1 appeared today in Software Update for one of my Big Sur machines. I installed it and the version number is indeed 16.3.1 and the build ID is 16614.4.6.11.7

                    sdagley
                    Forum|alt.badge.img+25
                    • sdagley
                    • Author
                    • Jamf Heroes
                    • February 17, 2023

                    Safari 16.3.1 appeared today in Software Update for one of my Big Sur machines. I installed it and the version number is indeed 16.3.1 and the build ID is 16614.4.6.11.7


                    @atlantamacguru Thanks for the heads up! Looks like Apple added macOS Big Sur 11.7.4 and Safari 16.3.1 for Big Sur to SUS on 2023-02-15

                     

                    EDIT: Looks like @ClassicII identified the reason for the Safari 16.3.1 release for Big Sur on the MacAdmins Slack channel:

                    The update "fixes an issue that may cause website icons to not load."

                    The Big Sur 11.7.4 update is required before you can install the Safari 16.3.1 update.

                    A
                    Forum|alt.badge.img+5
                    • AaronInTX
                    • New Contributor
                    • February 22, 2023

                    For Monterey, this requires macOS 12.3 or later - but it will install on 12.0.1 - 12.2.1.  Beware!

                    sdagley
                    Forum|alt.badge.img+25
                    • sdagley
                    • Author
                    • Jamf Heroes
                    • February 22, 2023

                    For Monterey, this requires macOS 12.3 or later - but it will install on 12.0.1 - 12.2.1.  Beware!


                    @AaronInTX Thanks for the warning. Normally the Apple installers have a list of builds they're usable on, but it could be that these .pkgs don't because they were expecting Software Update to do the build verification.

                    mvu
                    Forum|alt.badge.img+20
                    • mvu
                    • Jamf Heroes
                    • February 22, 2023

                    Running the software update command seems to pull down the latest Safari build. Using @sdagley EA to report the build version.

                     

                    1
                    Forum|alt.badge.img
                    • 1rose
                    • New Contributor
                    • March 10, 2023

                    Found a link for Safari 16.3.1 (Big Sur) that reports back 16614.4.6.11.7

                    https://swcdn.apple.com/content/downloads/62/14/032-51569-A_6C8JMC4NSY/3excb9qywqf00i87sfss53vk636jizy6ck/Safari16.3.1BigSurAuto.pkg

                     

                    How does one find/access a list of swcdn download links? I happen to come across the above from another forum. 

                      Terms & ConditionsCookie settingsAccessibility statement