Apple has released macOS Golden Gate 27.2.1, a security update containing multiple fixes for Mac computers. One of the changes extends protection against certificates issued through compromised eMudhra intermediate certificate authorities.
Apple began automatically blocking the affected certificates in Safari, Mail, and apps using its networking and security frameworks in October. Some command-line tools, including curl and git, relied on a separate system certificate list and could still accept the affected trust chains.
Version 27.2.1 extends the block to those tools, so most users no longer need to edit /etc/ssl/cert.pem manually. Apple says the private keys of eight eMudhra intermediate CAs were compromised, with six of the affected authorities issuing TLS certificates.
The release also includes security fixes for AirPlay, Bluetooth, Messages, and other system components. Mac users can install the update from System Settings > General > Software Update.