macOS 27.3 Includes an Important Security Fix

The archetypal macOS 27.3 developer beta includes an important information hole that prevents command-line tools from accepting eMudhra's compromised web certificates. Specifically, the update removes the affected certificates from the /etc/ssl/cert.pem file.


macOS 27.3 is not expected to beryllium released to the nationalist until December, but a macOS 27.2.1 update volition apt get sooner with the aforesaid information fix.

If you bash not privation to update your Mac astatine this time, you tin opt to manually region the affected certificates from your computer's /etc/ssl/cert.pem record by pursuing the instructions outlined successful Apple's support document related to this matter.

If you bash not usage command-line tools via Terminal oregon similar, you are already afloat protected. Apple said it has been blocking eMudhra's compromised TLS web certificates since October 19 successful Safari, Mail, and different apps that usage Apple's networking and information frameworks, crossed each of its bundle platforms. The certificates are blocked automatically with nary bundle update required, truthful astir users bash not request to instrumentality immoderate action.

This each comes aft a security researcher past period discovered that backstage cryptographic keys associated with 8 of Indian institution eMudhra's intermediate certificate authorization (CA) certificates were weak. The compromised keys could person allowed attackers to impersonate morganatic websites, perchance putting users' delicate accusation astatine risk. So far, nary grounds has surfaced that indicates the keys were exploited maliciously.
This article, "macOS 27.3 Includes an Important Security Fix" archetypal appeared connected MacRumors.com

Discuss this article successful our forums