The first developer beta of macOS 27.3 prevents command-line tools from accepting compromised TLS certificates issued by eMudhra. It does so by removing the affected certificates from the /etc/ssl/cert.pem file.
Apple is not expected to release macOS 27.3 publicly until December. A macOS 27.2.1 update is likely to arrive earlier with the same security fix, according to the information provided.
Mac users who do not want to update can remove the certificates manually from /etc/ssl/cert.pem by following Apple’s support instructions. Those who do not use command-line tools through Terminal or similar applications are already protected.
Apple has blocked the compromised certificates in Safari, Mail and other apps that rely on its networking and security frameworks across its software platforms since October 19. That protection is applied automatically and does not require a software update, so most users do not need to take action.
The issue came to light after a security researcher found that private cryptographic keys associated with eight of eMudhra’s intermediate certificate authority certificates were weak. The keys could have enabled attackers to impersonate legitimate websites and potentially expose sensitive information. No evidence of malicious use has surfaced so far.
Sources: MacRumors.