Apple's git still trusts the compromised eMudhra certificates
← Main Page
28th October 2026
Apple was notified of the eMudhra incident on 17th October. As of 28th October, the developer tools Apple ships with macOS, including git, curl and python3, still trust the compromised certificates.
Worse, macOS 27.2, released on 26th October, did not fix the issue and undid the workaround that users had applied by hand, leaving them vulnerable again.
Meanwhile, dozens of other projects, many run by volunteers, shipped fixes days ago.
Why does this matter?
Anyone ca...
Read more at emudhra.we-have-a-problem.com