Apple's git still trusts the compromised eMudhra certificates
- ← Main Page 28th October 2026 Apple was notified of the eMudhra incident on 17th October.
- As of 28th October, the developer tools Apple ships with macOS, including git, curl and python3, still trust the compromised certificates.
- Worse, macOS 27.2, released on 26th October, did not fix the issue and undid the workaround that users had applied by hand, leaving them vulnerable again.
Unverified
- ← Main Page 28th October 2026 Apple was notified of the eMudhra incident on 17th October.
- As of 28th October, the developer tools Apple ships with macOS, including git, curl and python3, still trust the compromised certificates.
- Worse, macOS 27.2, released on 26th October, did not fix the issue and undid the workaround that users had applied by hand, leaving them vulnerable again.
Sources: We-have-a-problem