macOS updates close the eMudhra certificate gap for command-line tools

[Cipher31]

Apple has fixed the remaining gap left by compromised security certificates. 9to5Mac reports that Apple has released macOS 27.2.1, macOS 26.7.3 and macOS 15.8.3 to deal with the eMudhra certificate problem

Mozilla had reported that the private keys of eight eMudhra intermediate certificate authorities were compromised. Apple's automatic blocks from 19 and 23 October protected Safari, Mail and apps using Apple's frameworks

Command line tools such as curl and git could still accept the bad certificates. The new updates close that gap and remove five root certificates from the system's certificate file, three of them eMudhra roots that were not in the original workaround

Anyone who cannot update can follow Apple's manual steps, which list all 12 affected certificates and their SHA-256 fingerprints on Apple's support site. Apps that bundle their own certificate lists are not covered, so users should contact those developers

Certificate problems are invisible to most users, but they can let attackers impersonate websites, so fixes like this matter. Developers who use curl and git on a Mac should install the update promptly. Apps with their own certificate stores are worth checking too

Do you install macOS updates straight away? And do you use command line tools like curl and git?

Today's macOS updates fix security gap involving eMudhra certificates - 9to5Mac9to5mac.com