The macOS Golden Gate 27.2.1 update Apple released today addresses the eMudhra certificate vulnerability, and Apple recommends users update to the latest software. For Macs that run macOS 26 or macOS 15, Apple has released macOS 26.7.3 and macOS 15.8.3. Apple previously blocked the compromised certificates in Safari, Mail, and apps that use Apple frameworks in October to protect most users, but command-line tools like curl and git were still able to accept them. With macOS 27.2.1, command-line tools will no longer accept the certificates. Prior to releasing the macOS 27.2.1 update, Apple offered instructions for those who wanted to protect themselves from the compromised eMudhra certificates when using command-line tools, directing users to manually remove the affected root certificates from their Mac's "/etc/ssl/cert.pem" file. Apple still has those instructions available for users who are unable to update their Macs. The compromised security certificates were issued by certificate authority eMudhra. An investigation launched by Mozilla found the certificates used private key values below 256, making them trivial to recover. Attackers could use the keys to create fraudulent certificates that appeared valid for any website. Apple also fixed the issue in the macOS Golden Gate 27.3 beta, but with the fix also included in macOS 27.2.1, users won't need to wait until December for protection. Popular StoriesApple Releases macOS Golden Gate 27.2Monday October 26, 2026 10:48 am PDT by Juli CloverApple today released macOS Golden Gate 27.2, the first major update to the macOS 27 operating system that launched in September. Mac users can download macOS Golden Gate 27.2 by opening up the System Settings app and using the Software Update option. macOS Golden Gate 27.2 overhauls the brightness and volume sliders, plus it expands Siri AI to new languages including French, Japanese,...macOS 27.2 Stops Upgrades From Removing RosettaUpgrading to macOS 27 no longer removes an existing Rosetta installation, according to Apple's enterprise release notes for macOS 27.2. Previously, upgrading to macOS 27 removed existing installations of Rosetta, the translation tool that lets Intel-based apps run on Apple silicon Macs. macOS 27 remains the final release with full Rosetta support. Apple plans to phase out general-purpose...You Can Turn Off the New MacBook Pro's Touchscreen FunctionalityThursday October 29, 2026 9:58 am PDT by Joe RossignolThe new MacBook Pro models with OLED displays have an accessibility setting that allows you to turn off touch input entirely, according to MacStories editor-in-chief Federico Viticci. He also said there is an option to turn on pinch-to-zoom functionality across the macOS Golden Gate...
macOS 27.2.1 Fixes eMudhra Certificate Flaw in Command-Line Tools
Full Article
Original Source
Read the full article at Macrumors →KhanList aggregates and links to publicly available news content. We do not host full articles from third-party sources. Always verify important information with original sources.