Apple fixes macOS password flaw