Security update 2021-005 Mojave 10.14.6

[nospamboz]

Could you post the same instructions and links for Security Update 2021-004 (Catalina) delta update package?

EDIT: Oops. I did Mojave, not Catalina. Did you try asking on the Catalina forum?

The Catalina SUCatalog link is below. It's "gzip'd", but you can unzip it to see the text. Some browsers (like Firefox) do so automatically.

https://swscan.apple.com/content/ca...ion-snowleopard-leopard.merged-1.sucatalog.gz

Then search for what you're looking for. Finder reports 571.7MB.

http://swcdn.apple.com/content/down...1r32znozp5v9pep3kn/SecUpd2021-004Catalina.pkg

 

[camelia]

EDIT: Oops. I did Mojave, not Catalina. Did you try asking on the Catalina forum?

The Catalina SUCatalog link is below. It's "gzip'd", but you can unzip it to see the text. Some browsers (like Firefox) do so automatically.

https://swscan.apple.com/content/ca...ion-snowleopard-leopard.merged-1.sucatalog.gz

Then search for what you're looking for. Finder reports 571.7MB.

http://swcdn.apple.com/content/down...1r32znozp5v9pep3kn/SecUpd2021-004Catalina.pkg

The download package didn't work

Yeah i know the steps from scratch but that's not really what i'm asking. I'll just wait until Apple releases the 2021-005 update √

Apple has released the 2021-005 update

Security Update 2021-005 (Mojave) - Apple Support

macOS Mojave Security Update 2021-005 (18G9323) is recommended for all users and improves the security of macOS.

support.apple.com

 

[VaZ]

The download package didn't work

View attachment 1815037



View attachment 1815036

Apple has released the 2021-005 update

Security Update 2021-005 (Mojave) - Apple Support

macOS Mojave Security Update 2021-005 (18G9323) is recommended for all users and improves the security of macOS.

support.apple.com

There it is !! Thank you

 

[la_manzana]

The download package didn't work

View attachment 1815037



View attachment 1815036

Apple has released the 2021-005 update

Security Update 2021-005 (Mojave) - Apple Support

macOS Mojave Security Update 2021-005 (18G9323) is recommended for all users and improves the security of macOS.

support.apple.com

Since this today released 2021-005 update is also nearly 2 GB large I would assume you can now skip the 2021-004 update and install 2021-005 update directly on top of build 18G103 10.14.6 or am I wrong?

 

[camelia]

Since this today released 2021-005 update is also nearly 2 GB large I would assume you can now skip the 2021-004 update and install 2021-005 update directly on top of build 18G103 10.14.6 or am I wrong?

I was talking about this .pkg

http://swcdn.apple.com/content/downloads/48/59/071-41286-A_1QSPF9B62X/3rln9ocxyzktqma51r32znozp5v9pep3kn/SecUpd2021-004Catalina.pkg

Not this .dmg

https://updates.cdn-apple.com/2021/macos/071-44388-20210729-E9ABD965-02E6-4DDB-B671-C9791D4F5006/SecUpd2021-005Mojave.dmg

BTW, What is the Safari 14.1.2 buid for Mojave?

And yes, you can skip the 2021-004 update and install 2021-005 update directly on top of build 18G103 10.14.6

Here is the direct link for Safari 14.1.2 for Mojave

http://swcdn.apple.com/content/downloads/44/05/071-47373-A_9A3CD8EVNY/jpiompzkddnter5tm1094w57tg63ok0axz/Safari14.1.2MojaveAuto.pkg

Saludos
Camelia

 

[KeesMacPro]

mas claro ni el agua

 

[la_manzana]

Pero desde que Apple descontinuó la GUI de Aqua, todas las actualizaciones han sido un poco sucias. 😆

Por eso no está de más preguntar de nuevo.

 

[KeesMacPro]

Apple va a su rollo hace tiempo ...

 

[camelia]

Since this today released 2021-005 update is also nearly 2 GB large I would assume you can now skip the 2021-004 update and install 2021-005 update directly on top of build 18G103 10.14.6 or am I wrong?

I think you need to install a combo update before install 2021-005 update!!!

Sorry

Came

 

[TheIntruder]

Since this today released 2021-005 update is also nearly 2 GB large I would assume you can now skip the 2021-004 update and install 2021-005 update directly on top of build 18G103 10.14.6 or am I wrong?

Yes, I've skipped a few, including 004.

Security updates are cumulative, like Combo system updates that incorporate all the latest changes.

If in doubt, the SU pref panel will reveal which update packages are needed.

For example, I skipped 004, and remained at 003. It offered 005.

However, other updates may not be, such as Safari.

During this recent round, it had to apply both the 14.1.1, and then 14.1.2 updates., coming from 14.1 "r2" (which was another botched release Apple had to stealthily pull and then reissue*, and didn't officially note, or change the version number, another example of its lowered standards)

* Yes, 14.1 was issued twice, first in late April, then again in early May, without notice, unlike past instances where Apple appended things like "rev 1.0" to the fixed package.

 

[camelia]

Which is the Safari 14.1.2 build number for Mojave?

Thanks
Camelia

 

[KeesMacPro]

This corresponds with Mojave latest build#18G9323

 

[la_manzana]

Actually I still stuck at 18G3020 (Security Update 2020-001) for a while now but have updated Safari until 14.1.2 ever since.

Basically for two reasons. First my MBA 2015 with Intel HD Graphics 6000 got instabil ("silent" gpuRestart 1-2 times a day, see here) during the later 2020 updates where they definitely changed the IntelDrivers in the pkg as well as CoreGrafics as I saw with Pacifist. Second they stopped the "ignore" feature for updates (I only wanted to prevent Catalina and Big Sur Upgrades necking me all the time in system preferences) also during some of the 2020 updates.

I decided to live with the risk of vulnerabilities since it is better to have a solid OS that don't have a gpuRestart 1 or 2 times a day out of the blue. And before the IntelDriver/CoreGrafics changes this is not happening at all.

So why did I think then about installing 2021-005?

Because just recently (yesterday) my Safari start to have problems only with youtube page (maybe it came with this 14.1.2 build ?) and say "Safari can’t establish a secure connection" (I saw a SSL error in log when this happen). This problem is only with YT.com if I use a local youtube URL like YT.es it works partly but not fully. If I also disable "Prevent cross-site tracking" it kind of repairs itself during this program session to work fully again with YT.com. Other browsers like Chrome, Firefox or Opera did not show any problems at all with YT.com. I did reset DNS cache in macOS as well as I did reset Safari completely but this behaviour stays. So maybe it was coming with Safari 14.1.2 (just update yesterday) that shows this issue only when using it on an older 18G3020 installation?

But If I rethink this while writing this post, instead of updating my OS to 2021-005 just to find out if Apple had finally addressed the Intel freezes or not I maybe should just try to downgrade my Safari to 14.1.1 instead...

 

[la_manzana]

Well downgraded Safari to 14.1.1 (reboot to recovery, disable SIP, reboot, Install pkg via Pacifist...) but it was not the culprit. This strange YT behaviour is still there. Maybe only google or my local ISP just changed something in the routing tables that looks fishy just for Safari and thats why it works better with disabled "Prevent cross-site tracking"?

So still undecided if I install 2021-005 since I have big doubts that Apple fixed the intel graphics issues during 2021 updates that they introduced during 2020 for 6 year old macs (I still wonder if this is part of their Planned obsolescence strategy?). And installing and waiting for sporadic problems to happen and then go back to a time machine update wastes so much time.

I will have to dig into some forums first to see if some user of MBA 2015 experience something with the 2021 updates.
In any case I did a new time machine backup just yesterday just in case.

 

[la_manzana]

I carefully study all treads related to all updates after 2020-001 it seams last complains according to gpuRestart stops with 2020-007. Until 2021-003 no one reports big issues. In 2021-004 was this Kerberos issue, but this seems to solved with 2021-005.

So I finally risked to install Security Update 2021-005. The former mentioned Safari issue I have only with YT.com is still there with 2021-005 even after also updating Safari back to 14.1.2 . So I don't know what that is. I need to check more things here.

Until now no other issues seen except of the negging for "Big Sur" now in system preferences that can't be ignored anymore. Fingers crossed that at leased the gpuRestart issue is really solved now. 🤞

Added later:
I finally found out the source of my Safari YT issue. I don't know why, but Little Snitch hat a rule added at 05.08.21 to prohibit Safari to connect to youtube.com on port 443? I must have been tired or drunk or both to add such a rule. 😳

 

[KeesMacPro]

I must have been tired or drunk or both

No te da verguenza? 🤣

 

[la_manzana]

Sí, mucho. Por eso usé la cara sonrojada. 😳

 

[la_manzana]

I had only one issue bothering me since install of Security Update 2021-005 that shutdowns needs much longer than before (1-2 minutes! this was way too long compared to before).

So after some googling I decided I should do an SMC and a PRAM reset. Big sur! I mean Big fail!
After doing so my system would not boot anymore.

I tried so far:
1) activating verbose mode -> saw it refused to load some kexts (?)
2) booting in recovery mode and check file system -> no errors found and file system is fine
3) booting in Safe Mode -> It needs endless since it also did a file system check again -> boots fine to GUI otherwise
4) try to reboot in normal (verbose) mode again since, Safe Mode should fix kernel kext cache -> sill hangs because it still refused to load some kexts (?)
5) Boot back into Safe Mode again (still works) and did on terminal a manually try to rebuild kernel cache and fix file permissions in extension folders.
6) try to reboot in normal (verbose) mode again -> sill hangs because it still refused to load some kexts (?)
7) giving up on fixing it since I have a fresh time machine backup and try to reinstall Mojave now...
(and this needs time... I write on my Chromebook now. It just works. )

I don't know what could be the root cause of this? I installed 2021-005 directly on 2020-001. But even the Apple Software-center itself suggested this as the only available update option (after I reset the previously ignored updates).

I don't installed 2021-005 from within the Software-center since I already had downloaded the 2 GB 2021-005 pkg file of this update. Maybe this caused some problem? But since the pkg was packed into a dmg file that did a CRC check first when opening it I don't thing the pkg was corrupted.

Or that I had such a big jump from 2020-001 to 2021-005? I assume it was at first still using some old cached kexts after install and the PRAM reset trigger a kext cache rebuild and this just revealed the underlying problem that some kexts are not working. But who knows?

 

[KeesMacPro]

giving up on fixing it since I have a fresh time machine backup and try to reinstall Mojave now...

That's what I would do too.
Erase the drive , clean Mojave install, update to latest version, migration assistant to recover your data.

 

[la_manzana]

Since there were no file system issues found at all from disk utilities and Safe Mode were still working I decided to give a reinstallation over the existing installation from the recovery partition a try. I never tried this way and so I did it maybe just because of pure curiosity.

Reinstall took a while but then I was greeted with a working 10.14.6 (18G103) without any of the later Security Updates (not even the ones from 2019). Software-center in this state still directly now offers newest Security update 2021-005 together with an supplementary update for Safari and Safari 14.1.2 update.

I will try this Security update 2021-005 now directly from the Software-center since the base a 18G103 is as "pure" as combo version can get.

 

[la_manzana]

Back in business. ✌️

Security update 2021-005 and Safari 14.1.2 installs went quick and smoothly (compared to the very long re-install of 18G103 before).
Shutdown is now as quick as I expected it to be (some seconds). I also already risked the SMC and PRAM reset without loosing the system as before.

Best guess is that camelia was right from the beginning to only install the newest Security update directly on top of a pure 18G103.
Or maybe do all updates in the order as they where published and don't miss any update in-between? But in this case even Apples own Software-center recommended it wrong.

 

[KeesMacPro]

Excelente! 👊

Personally I try to avoid this security update/version mess , for possible scenarios as you had.
CarbonCopyCloner for example is a very nice tool for this.
When a SU is released , after cloning a backup, I install it on 1 Mac device , test it and check for reports here on this forum about the latest update.
If all is good, I update all my Macs, if not I clone the backup back and wait for Apple to release a supplemental update ....
Cloning the backup back to the system disk is a 5 min job, and 100% effective 😎

 

[la_manzana]

Cloning the backup back to the system disk is a 5 min job, and 100% effective 😎

¿De verdad? Is a restore of a backup with CarbonCopyCloner that effective compared to Time Machine?

I just used restore from Time Machine Backups together with a new systems install in past and this needs really some time (some hours) to be done and than you end up with a system where the full disk encryption is disabled by default and you need some more hours to enable FileVault again. Once in APFS times it even happen to me that some error during enabling of FileVault and another fresh reinstall/restore was needed again.

Supports CCC APFS with full disk encryption for creation and restore of backups? How is this done when you have a full system lost like I had yesterday. Has CCC his own boot mechanisms (boot-stick etc.) or did it needs than also a fresh macOS install from recovery partition first before restoring the CCC backup?

 

[KeesMacPro]

¿De verdad? Is a restore of a backup with CarbonCopyCloner that effective compared to Time Machine?

Afirmativo! It takes a few minutes from a recent backup , as it compares the 2 volumes and edits the changes.
Restoring from TM takes way more time.

TBH I dont use encryption , but CCC is fully compatible with this.
I suppose time to restore and encrypt will be substantial...

Anyway, CCC makes a 100% clone , including a recovery partition , so no problem at all to use it as a "normal" OS volume.

Here's an article about encryprion with CCC:

Working with FileVault Encryption | Carbon Copy Cloner | Bombich Software

bombich.com

 

[la_manzana]

Sounds interesting if CCC is faster. I will give it a try.

Full disk encryption I use manly for the hopefully theoretical case if the laptop will ever get stolen or I lost it. So that I have at least the pease of mind that a finder/thief can not look into the personal data on the disk.

The question was more related if I can safe the time that is needed to encrypt the disk in a second step after a full restore or if it is done automatically during the restore process. I can say at least the way I chose yesterday to re-install macOS just over the existing already encrypted installation saves this extra encryption step afterwards and so far everything runs hunky dory.