CONNECT WITH US
Apple

Apple

macOS 27.3 Includes an Important Security Fix

MacRumors - Apple logo

Published on

Add as a preferred source on Google
macOS 27.3 Includes an Important Security Fix

The first macOS 27.3 developer beta includes an important security fix that prevents command-line tools from accepting eMudhra's compromised web certificates . Specifically, the update removes the affected certificates from the /etc/ssl/cert.pem file. macOS 27.3 is not expected to be released to the public until December, but a macOS 27.2.1 update will likely arrive sooner with the same security fix. If you do not wish to update your Mac at this time, you can opt to manually remove the affected certificates from your computer's /etc/ssl/cert.pem file by following the instructions outlined in Apple's support document related to this matter. If you do not use command-line tools via Terminal or similar, you are already fully protected. Apple said it has been blocking eMudhra's compromised TLS web certificates since October 19 in Safari, Mail, and other apps that use Apple's networking and security frameworks, across all of its software platforms. The certificates are blocked automatically with no software update required, so most users do not need to take any action. This all comes after a security researcher last month discovered that private cryptographic keys associated with eight of Indian company eMudhra's intermediate certificate authority (CA) certificates were weak. The compromised keys could have allowed attackers to impersonate legitimate websites, potentially putting users' sensitive information at risk. So far, no evidence has surfaced that indicates the keys were exploited maliciously. Related Roundup: macOS Golden Gate

This article, " macOS 27.3 Includes an Important Security Fix " first appeared on MacRumors.com Discuss this article in our forums


Source link
Related Topics:Apple

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.