Homebrew 7.0.0 is out, here’s what changed for security Homebrew installs command-line software and desktop applications from the terminal on macOS and Linux, and Mac developers use it to set up their machines. On Sunday the project shipped version 7.0.0 and closed eight security advisories with it. The most serious of them let unsigned removal metadata for a cask, Homebrew’s recipe for installing a prebuilt application, execute commands with sudo. Homebrew deleted the vulnerable recovery code and the API accessors that reached it. Seven of the eight advisories were fixed in 6.0.x releases, so a machine that has been auto-updating already carries those. The eighth arrives in 7.0.0: until it is installed, a malicious cask can execute code outside the macOS install sandbox through…