Apple closes macOS certificate gap affecting curl and git

Apple released macOS updates that prevent affected command-line tools, including curl and git, from accepting compromised eMudhra certificates, 9to5Mac reports. Earlier automatic protections covered Safari, Mail and apps using Apple's security frameworks, but left a gap administrators had to address manually. The fix is included in macOS 27.2.1, 26.7.3 and 15.8.3. The updates also remove five root certificates, including three additional eMudhra certificates outside the original workaround. Compromised certificate authority keys could let attackers impersonate websites and intercept information. Apps and tools maintaining their own root certificate lists may require separate action through their developers.