Apple released macOS 27.2.1 (Golden Gate) today, fixing a certificate flaw from eMudhra that affected command‑line tools like curl and git. The update also includes separate patches for older macOS versions 26.7.3 and 15.8.3.
The compromised certificates were originally blocked in Safari, Mail, and Apple‑framework apps in October, but command‑line utilities continued to trust them. Apple had previously published manual removal steps for the "/etc/ssl/cert.pem" file for users unable to update. macOS 27.2.1 now prevents those tools from accepting the faulty certificates.
An investigation by Mozilla revealed that the eMudhra keys used private values below 256, making them easily recoverable. Attackers could forge valid certificates for any site. The same fix was already present in the macOS Golden Gate 27.3 beta, so users no longer need to wait for December.
Apple recommends all users install the latest software. The update is available via System Settings > Software Update. For those on macOS 26 or macOS 15, the tailored updates 26.7.3 and 15.8.3 are also out. The issue was first reported on MacRumors and has been added to the ongoing security roundup.
Source: MacRumors · Summarized by HeadlinesBriefing