macOS 27.2.1 Addresses eMudhra Certificate Vulnerability in Command-Line Tools
Apple has released macOS 27.2.1, which patches a security flaw involving eMudhra certificates. Previously, while Safari and system frameworks were protected, command-line utilities such as curl and git continued to accep
Apple has released macOS 27.2.1, which patches a security flaw involving eMudhra certificates. Previously, while Safari and system frameworks were protected, command-line utilities such as curl and git continued to accept these compromised certificates.
Technical Details
- Vulnerability: The eMudhra certificates used private key values below 256, allowing for trivial recovery and the generation of fraudulent certificates.
- Fix: The update enforces stricter certificate validation within command-line tools.
-
Mitigation: For systems unable to update, Apple recommends manually removing the affected root certificates from
/etc/ssl/cert.pem.
Updates are also available for older versions: macOS 26.7.3 and macOS 15.8.3.
Source: https://www.macrumors.com/2026/11/09/macos-27-2-1-emudhra-fix/
Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.