macOS 27.2.1 Fixes eMudhra Certificate Flaw in Command-Line Tools

The macOS Golden Gate 27.2.1 update Apple released contiguous addresses the eMudhra certificate vulnerability, and Apple recommends users update to the latest software.


For Macs that tally macOS 26 oregon macOS 15, Apple has released macOS 26.7.3 and macOS 15.8.3.

Apple antecedently blocked the compromised certificates successful Safari, Mail, and apps that usage Apple frameworks successful October to support astir users, but command-line tools similar curl and git were inactive capable to accept them. With macOS 27.2.1, command-line tools volition nary longer judge the certificates.

Prior to releasing the macOS 27.2.1 update, Apple offered instructions for those who wanted to support themselves from the compromised eMudhra certificates erstwhile utilizing command-line tools, directing users to manually region the affected basal certificates from their Mac's "/etc/ssl/cert.pem" file.

Apple inactive has those instructions available for users who are incapable to update their Macs.

The compromised information certificates were issued by certificate authorization eMudhra. An probe launched by Mozilla recovered the certificates utilized backstage cardinal values beneath 256, making them trivial to recover. Attackers could usage the keys to make fraudulent certificates that appeared valid for immoderate website.

Apple besides fixed the contented successful the macOS Golden Gate 27.3 beta, but with the hole besides included successful macOS 27.2.1, users won't request to hold until December for protection.
This article, "macOS 27.2.1 Fixes eMudhra Certificate Flaw successful Command-Line Tools" archetypal appeared connected MacRumors.com

Discuss this article successful our forums