Unfortunately, the recently dowloaded ElCapitan installer includes security updates through 2018-003.
Hello myndex,
Can I ask you to please edit/delete the statement above?
I have just followed the link I posted at post
#1390 to the Apple Support web page. From here you can download the Apple version of "Install OS X El Capitan" app. When you download this file it is an Apple Disk Image (InstallMacOSX.dmg).
When you open this disk image, it will mount and open a window that contains an Apple Package file (InstallMacOSX.pkg).
When you double-click the package, the installer will start. Don't get too exited, this "installer" simply unpacks the data as "Install OS X El Capitan" app into your Applications folder. You now have the Apple-supplied El Capitan installer app.
As I said I have just downloaded using this method, and I have double-checked what version of El Capitan it contains, as well as which kernel file it contains.
The version is 10.11.6
The kernel is as per 10.11.6
I have each kernel file extracted from each update. I ran md5 to generate a signature for each file
MD5 (kernel.10.11.0) = faf80946afd28039e7de5214dcba5980
MD5 (kernel.10.11.1) = b3b830893da403c5da7a38326b52a18e
MD5 (kernel.10.11.2) = 2c7a3aeda4039dc8ff16f8337d75f1ee
MD5 (kernel.10.11.3) = b077f646ed1f3e603adc04b1cd0ad7b1
MD5 (kernel.10.11.4) = 575ee089bfe7b1fa17677339dee070f4
MD5 (kernel.10.11.5) = af34da160b2601e1166104d67df3fb6a
MD5 (kernel.10.11.6) = b704605f8dde1e918196ebf0a672d589
MD5 (kernel.10.11.6-2020-08) = b704605f8dde1e918196ebf0a672d589
MD5 (kernel.secupd.2017-001) = 3b6d1246bd345ec114f8786ff6b386c5
MD5 (kernel.secupd.2017-002) = 7cd408e832a61c52fa7e7f6654f175e3
MD5 (kernel.secupd.2017-003) = 032d2bdc7ecd23af401bd67d0acfb05b
MD5 (kernel.secupd.2017-004) = fb43a43f673703863a1321df134d7c11
MD5 (kernel.secupd.2017-005) = 5715cec47b73877cb960081775dd2c3c
MD5 (kernel.secupd.2018-001) = fa693b647577f38d73887a4212dc062e
MD5 (kernel.secupd.2018-002) = c9795839b7939cde89706ead7aefab19
MD5 (kernel.secupd.2018-003) = bb81ce95e4978cd0d9fe172fbd430d72
MD5 (kernel.secupd.2018-004) = 64e73b314d5f2f67b8046a653511840c
As you can see (in green), the kernel I extracted some time ago from the 10.11.6 distribution is the same as the version I extracted from the download today.
The official Apple download DOES NOT include security updates.
Security Updates are released AFTER a version of Mac OS goes into "maintenance" mode.
Apple distributes versions of Mac OS and provides "point release" updates.
10.11.0
10.11.1
:
10.11.5
10.11.6
Apple then puts this version of Mac OS into maintenance mode. This means Apple releases Security Updates
Security Update for El Capitan 2017-001
:
Security Update for El Capitan 2017-005
Security Update for El Capitan 2018-001
:
Security Update for El Capitan 2018-004
The difference is that the point-release updates "fix issues" AND introduce "new" items, whereas security updates are fixes only.
The point is Apple releases "full" updates up to 10.11.6. If you download the most current release of El Capitan from Apple, what you will get is 10.11.6.
You will then need to install the Security Updates after you clean install El Capitan.
You can SAFELY install Security Update 2017-005.
Security Updates 2018-* are NOT safe to install. If you allow auto updates, or if you manually choose to install a 2018 Security update, you will brick your working system. It will go into a boot loop. It starts to boot, crashes almost immediately and then tries to boot again, crashes, reboots, etc...
You CAN recover from the boot loop issue, by down-grading the kernel file to the last known good kernel (the one from SecUpd-2017-005). It's not an easy process, you need to have a copy of the 2017-005 kernel (someone posted a copy in this thread if you're not confident in getting/extracting it yourself). Then you need to boot into your recovery partition, or attach your bricked disk to a working Mac. Then replace the "bad" kernel with the "good" kernel and rebuild the extensions cache. Reconnect your drive if necessary, and reboot.
If you use my Pikify tools, you will definitely have a working Recovery HD.
If you use the DMG clone method, you might not have a working Recovery HD (it depends on the source, and how you perform the restore)!