Apple Updates macOS to Block Compromised eMudhra Certificates
Technology · First reported 9 Nov, 20:26 · Updated 20:34
Apple’s latest macOS updates prevent certain command-line tools from accepting compromised eMudhra certificates. The updates cover macOS 27, 26 and 15; Apple also retains manual instructions for users unable to update.
- Apple released macOS 27.2.1, 26.7.3 and 15.8.3 to prevent affected command-line tools, including curl and git, from accepting the compromised certificates.
- Earlier protections covered Safari, Mail and apps using Apple frameworks, but some command-line tools remained outside that protection.
- Apple says users who cannot install the updates can still follow its manual instructions; some apps and tools use their own certificate lists and may require contacting their developers.
Summary written by Lux AI from 2 articles
Key facts
- Updates named
- macOS 27.2.1, 26.7.3 and 15.8.3
- Affected tools mentioned
- curl and git
- Certificates removed
- The update removes five root CA certificates from /etc/ssl/cert.pem.
- Manual guidance
- Apple continues to provide instructions for users unable to install the updates.
Source spectrum
Far left
Left
Lean left
Centre
Lean right
Right
Far right
Left 0 · Centre 2 · Right 0 of 2 rated sources
Images from the coverage
Background
- An earlier Lux story reported Apple’s release of macOS Golden Gate 27.2.1 alongside updates for macOS Tahoe and Sequoia. [5719c224-1fb9-446f-9c6e-226b88809030]
- That earlier story noted that reports described security fixes across the releases, while Apple’s security-release page had not yet been updated. [5719c224-1fb9-446f-9c6e-226b88809030]
All coverage
Coverage over time
LeftCentreRight
Articles per hour since first reported, by side.
Ownership
- Corporation 100% (2)
Share of the 2 sources by owner type.