GitHub macOS runners remain vulnerable to the eMudhra intermediate CA compromise
charliermarsh · x · 2026-11-03
woodruffw (amplified by Charlie Marsh) disclosed that all public GitHub macOS runner images remain vulnerable to the eMudhra intermediate CA compromise, with no patch applied — meaning TLS encryption and authentication for public traffic through these runners is ineffective. Two infection paths: the system cert bundle /etc/ssl/cert.pem still contains roots chaining to the compromised CA (Apple has only patched the Network.framework root program), and the images ship Homebrew with updates disabled, so git/curl never got the fixed versions. Log excerpts from an xcode-27 runner show connections to the compromised domain still succeeding. Teams running outbound traffic on macOS CI should take note.
Related event: GitHub macOS Runners Still Expose Users to Compromised eMudhra CA(2 posts)→
More from Infra
- OpenAI launches grid-protection program to ease data-center strain on the power network — emmanuelvivier · 2026-11-04
- 8 free GitHub repos with 792K stars that take your AI off Big Tech's servers — alex_verem · 2026-11-04
- OpenClaw cut its ~$1M/month CI bill by over 95% with adaptive agentic testing — vincent_koc · 2026-11-04
- LlamaIndex stacks 17 small optimizations for ~10x faster OCRia-1 token generation on a single B200 — llama_index · 2026-11-04
- phonon: WebGPU browser TTS hits 26x real-time on iPhone with a 44MB model, open sourced — blixt · 2026-11-04
- GlobalWafers at full capacity across all wafer sizes, ASP hikes expected from 2027 — BenBajarin · 2026-11-04