# Apple closes macOS certificate gap affecting curl and git

_Published Monday, November 9, 2026 at 6:10 PM EST · Security · Latest · Tier 2 — Notable_

![Apple closes macOS certificate gap affecting curl and git — Primary](https://9to5mac.com/wp-content/uploads/sites/6/2024/06/apple-hacked.jpg?quality=82&strip=all&resize=1200,628)

Apple released macOS updates that prevent affected command-line tools, including curl and git, from accepting compromised eMudhra certificates, 9to5Mac reports. Earlier automatic protections covered Safari, Mail and apps using Apple's security frameworks, but left a gap administrators had to address manually.

The fix is included in macOS 27.2.1, 26.7.3 and 15.8.3. The updates also remove five root certificates, including three additional eMudhra certificates outside the original workaround.

Compromised certificate authority keys could let attackers impersonate websites and intercept information. Apps and tools maintaining their own root certificate lists may require separate action through their developers.

## Sources

- [9to5Mac](https://9to5mac.com/2026/11/09/todays-macos-updates-fix-security-gap-involving-emudhra-certificates/)

---
Canonical: https://techandbusiness.org/newswire/m8OJCwMAz2NeFs0Od2mnbq
Published: 2026-11-09T23:10:23.880Z
Story chronology: 2026-11-09T22:17:36.000Z
Retrieved: 2026-11-10T01:29:11.889Z
Publisher: Tech & Business (techandbusiness.org)