The macOS Golden Gate 27.2.1 update released by Apple today addresses the eMudhra certificate vulnerability, and Apple recommends users update to the latest software.
For Macs running macOS 26 or macOS 15, Apple has released macOS 26.7.3 and macOS 15.8.3.
Apple had previously blocked compromised certificates in Safari, Mail and apps that use Apple frameworks in October to protect most users, but command-line tools like curl and git were still able to accept them. With macOS 27.2.1, command-line tools will no longer accept certificates.
Before releasing the macOS 27.2.1 update, Apple offered instructions to those who wanted to protect themselves from compromised eMudhra certificates when using command-line tools, directing users to manually remove the affected root certificates from their Mac’s “/etc/ssl/cert.pem” file.
Apple still has these instructions available for users who are unable to update their Macs.
The compromised security certificates were issued by the eMudhra certification authority. An investigation launched by Mozilla found that the certificates used private key values lower than 256, making them trivial to recover. Attackers could use the keys to create fraudulent certificates that appear valid for any website.
Apple also fixed the issue in the macOS Golden Gate 27.3 beta, but with the fix also included in macOS 27.2.1, users won’t have to wait until December for protection.
Popular stories
Apple releases macOS Golden Gate 27.2
Apple today released macOS Golden Gate 27.2, the first major update to the macOS 27 operating system launched in September. Mac users can download macOS Golden Gate 27.2 by opening the System Settings app and using the Software Update option. macOS Golden Gate 27.2 overhauls the brightness and volume sliders, plus expands Siri AI to new languages including French, Japanese,…
macOS 27.2 prevents updates from removing Rosetta
Updating to macOS 27 no longer removes an existing Rosetta installation, according to Apple’s corporate release notes for macOS 27.2. Previously, updating to macOS 27 removed existing installations of Rosetta, the translation tool that allows Intel-based apps to run on Apple silicon Macs. macOS 27 remains the final version with full Rosetta support. Apple plans to phase out generic products…
You can disable the touchscreen functionality of the new MacBook Pro
The new MacBook Pro models with OLED displays have an accessibility setting that lets you turn off touch input entirely, according to MacStories editor-in-chief Federico Viticci. He also said that there is an option to enable pinch-to-zoom functionality on macOS Golden Gate…
