Apple released its macOS Golden Gate 27.2.1 update on Monday. The release fixes the eMudhra certificate vulnerability, and Apple recommends users update to the latest software as soon as possible.
Apple has released macOS 26.7.3 and macOS 15.8.3 with the same vulnerability fix for Macs that run macOS 26 or macOS 15,
While Apple had previously blocked the compromised certificates in Safari, Mail, and apps that use Apple frameworks back in October, which protected most users, command-line tools like curl and git were still able to accept them. The macOS 27.2.1 update blocks command-line tools from accepting the certificates.
Apple has offered instructions for those who are unable to update their Macs but wanted to protect themselves from the compromised eMudhra certificates when using command-line tools. The instructions direct users to manually remove the affected root certificates from their Mac’s “/etc/ssl/cert.pem” file.
The compromised security certificates were issued by certificate authority eMudhra. An investigation launched by Mozilla found the certificates used private key values below 256, making them child’s play to recover. Once recovered, attackers could use the keys to create fraudulent certificates that appeared valid for any website.
Apple also fixed the issue in the macOS Golden Gate 27.3 beta, released last week.
