macOS 27.3 Includes an Important Security Fix

The latest macOS 27.3 developer beta incorporates a crucial security update that safeguards the system from compromised web certificates issued by eMudhra. This update effectively removes the suspicious certificates from the /etc/ssl/cert.pem file, a crucial step in preventing potential security threats. Although macOS 27.3 is slated for a December release, users can expect a similar security fix to be rolled out in the interim through macOS 27.2.1.

Users who opt not to update their Mac at this time have the option to manually remove the affected certificates from their system's /etc/ssl/cert.pem file, as detailed in Apple's support document. However, those who do not utilize command-line tools via Terminal or comparable platforms are already safeguarded from this specific security flaw.

Apple has been blocking eMudhra's compromised TLS web certificates since October 19 in various applications, including Safari, Mail, and others that rely on Apple's networking and security frameworks. This protective measure is automatic and does not necessitate a software update, so most users are not required to take any additional action.

The issue stems from a discovery made last month by a security researcher who found that weak private cryptographic keys associated with eight of eMudhra's intermediate certificate authority (CA) certificates were vulnerable. Should attackers have exploited these weak keys, they could have impersonated legitimate websites, potentially putting users' sensitive information at risk.

As of now, there is no evidence suggesting that the keys were misused maliciously. For more updates, refer to the macOS Golden Gate article on MacRumors.com.