Ten days later, Git on macOS still trusts the compromised eMudhra certificates

Apple's developer tools on macOS, including git, curl, and python3, still trust compromised eMudhra certificates ten days after the company was notified of the security breach, leaving users vulnerable to HTTPS interception attacks on code repositories and credentials. macOS 27.2, released on October 26th, failed to address the issue and reversed manual workarounds users had applied, while dozens of other projects already shipped fixes days earlier. Developers can manually remove the affected roots as a temporary measure, but Apple needs to release an official fix since subsequent macOS updates may revert these manual protections.