Apple has released a supplementary update for macOS High Sierra incorporating various bug fixes for Macs. Apple says it improves ‘installer robustness’, fixes a graphical problem with Adobe InDesign and addresses an issue with mail not sending from Yahoo accounts.
To update, visit the Mac App Store section and navigate to the Updates tab on a machine running macOS High Sierra.
Whilst Apple lists three very specific fixes in the release notes, the update is also believed to fix a security problem relating to APFS drives.
The bug meant that some APFS volumes would reveal their password in plain text in the Disk Utility interface.
Rather than being saved into the password field, the password would be set as the ‘hint’ which is readable by anyone. You can see a demo of the problem here: