GoKawiilApple patches macOS command-line tools against compromised eMudhra certificates
Apple released macOS 27.2.1, 26.7.3 and 15.8.3 to stop command-line tools like curl and git from accepting eight compromised eMudhra certificate authority keys. Apple had already blocked the certificates in Safari, Mail and other apps via automatic configuration updates starting October 19, but command-line tools remained exposed until today's patch. The updates also strip five root CA certificates, including additional eMudhra certificates, from the system's trust store.