macOS 27.2
Juli Clover (release notes,
security,
enterprise,
developer,
full installer,
IPSW):
macOS Golden Gate 27.2 overhauls the brightness and volume sliders, plus it expands Siri AI to new languages including French, Japanese, Korean, Portuguese, and Spanish.
Mr. Macintosh (post):
Apple just broke the macOS security update record AGAIN, patching 263 CVEs in macOS Golden Gate 27.2! 🤯🔐
Jeff Johnson:
I decided to email Apple Product Security yesterday just to ask whether CVE-2026-112500 was my [e-mail privacy] issue. In the past I’ve had a number of email conversations with Apple Product Security, including a long-running thread initiated by them way back in 2024 about a WebKit security issue that I had reported, with last reply in July of this year. Sadly, as far as I can tell, I still haven’t been credit for that issue.
[…]
In other words, Apple Product Security no longer accepts reports via email, instead requiring security researchers to submit via a web form. But the web form wants you to “Report a vulnerability,” with no place for a simple question like mine, about a vulnerability already fixed. Also, the quoted paragraph implies that if you don’t use the web form, you might not get a CVE, which I suspect is what happened to me!
Gwynne Raskind:
PSA: If you use the removemacai tool and are having trouble updating to macOS 27.2, remove the RemoveMacAI profile in System Settings -> General -> Device Management. It appears to somehow block softwareupdate’s ability to download parts of the update.
Mario Guzmán:
macOS 27.2 beta brings back the solid divider line between sidebars and their details view.
Steve Troughton-Smith:
macOS 27.2 has reverted the [Mission Control] change: fullscreen apps are now once again titled by app name, not window title
David Deller:
Still broken on macOS 27.2. No response to my Feedback so far.
I’ve since added a workaround in Radiccio that simply removes the Liquid Glass effect (so the buttons can work again).
Hartley Charlton:
Upgrading to macOS 27 no longer removes an existing Rosetta installation[…]
Jeff Johnson:
I suspect what Apple really meant is that macOS 27 was not automatically reinstalling Rosetta, and now it does again in 27.2.
Previously:
Mac Installer Plug-Ins Bug
macOS 27.0.1
Hide My Email Vulnerability Exposes Real Address
Mandatory Apple Intelligence
https://mjtsai.com/blog/2026/10/27/macos-27-2/
#goldengate #appleproduct #productsecurity #juliclover #macos #jeffjohnson #email #again #appleintelligence #mandatoryapple
#rss #feeds #linksharing #qwibbit
Michael Tsai (Unofficial)
npub10v…n27dc
2026-10-28 03:32:48 UTC
Author Public Key
npub10vavgjgeehwwlhqfxrdnksn2yku48cscd7uetxmz2y7umys5l6qqdn27dcSeen on
wss://relay.primal.netPublished at
2026-10-28 03:32:48 UTCEvent JSON
{
"id": "a87b41d3abf0ae9cfcf398415962577f61f1c38f60f22f853576e71383f772b4",
"pubkey": "7b3ac44919cddcefdc0930db3b426a25b953e2186fb9959b62513dcd9214fe80",
"created_at": 1793158368,
"kind": 1,
"tags": [
[
"t",
"goldengate"
],
[
"t",
"appleproduct"
],
[
"t",
"productsecurity"
],
[
"t",
"juliclover"
],
[
"t",
"macos"
],
[
"t",
"jeffjohnson"
],
[
"t",
"email"
],
[
"t",
"again"
],
[
"t",
"appleintelligence"
],
[
"t",
"mandatoryapple"
],
[
"t",
"rss"
],
[
"t",
"feeds"
],
[
"t",
"linksharing"
],
[
"t",
"qwibbit"
]
],
"content": "macOS 27.2\n\nJuli Clover (release notes,\nsecurity,\nenterprise,\ndeveloper,\nfull installer,\nIPSW):\nmacOS Golden Gate 27.2 overhauls the brightness and volume sliders, plus it expands Siri AI to new languages including French, Japanese, Korean, Portuguese, and Spanish.\nMr. Macintosh (post):\nApple just broke the macOS security update record AGAIN, patching 263 CVEs in macOS Golden Gate 27.2! 🤯🔐\nJeff Johnson:\nI decided to email Apple Product Security yesterday just to ask whether CVE-2026-112500 was my [e-mail privacy] issue. In the past I’ve had a number of email conversations with Apple Product Security, including a long-running thread initiated by them way back in 2024 about a WebKit security issue that I had reported, with last reply in July of this year. Sadly, as far as I can tell, I still haven’t been credit for that issue.\n[…]\nIn other words, Apple Product Security no longer accepts reports via email, instead requiring security researchers to submit via a web form. But the web form wants you to “Report a vulnerability,” with no place for a simple question like mine, about a vulnerability already fixed. Also, the quoted paragraph implies that if you don’t use the web form, you might not get a CVE, which I suspect is what happened to me!\nGwynne Raskind:\nPSA: If you use the removemacai tool and are having trouble updating to macOS 27.2, remove the RemoveMacAI profile in System Settings -\u003e General -\u003e Device Management. It appears to somehow block softwareupdate’s ability to download parts of the update.\nMario Guzmán:\nmacOS 27.2 beta brings back the solid divider line between sidebars and their details view.\nSteve Troughton-Smith:\nmacOS 27.2 has reverted the [Mission Control] change: fullscreen apps are now once again titled by app name, not window title\nDavid Deller:\nStill broken on macOS 27.2. No response to my Feedback so far.\nI’ve since added a workaround in Radiccio that simply removes the Liquid Glass effect (so the buttons can work again).\nHartley Charlton:\nUpgrading to macOS 27 no longer removes an existing Rosetta installation[…]\nJeff Johnson:\nI suspect what Apple really meant is that macOS 27 was not automatically reinstalling Rosetta, and now it does again in 27.2.\nPreviously:\nMac Installer Plug-Ins Bug\nmacOS 27.0.1\nHide My Email Vulnerability Exposes Real Address\nMandatory Apple Intelligence\n\nhttps://mjtsai.com/blog/2026/10/27/macos-27-2/\n\n#goldengate #appleproduct #productsecurity #juliclover #macos #jeffjohnson #email #again #appleintelligence #mandatoryapple\n\n#rss #feeds #linksharing #qwibbit",
"sig": "ffa29f8729042f51fac7cc4b372414a2892a96cebd96deb0cc0900634d8ca7f4aa0bd466ac5ada8150a1e1ed4d08b6526dd4f6022594d02f2db0fdae04de7fda"
}