GoKawiilmacOS developer tools still trust revoked eMudhra certificates after 10 days
Apple was notified on 17 October that eMudhra had issued compromised TLS certificates, but as of 28 October the git, curl and python3 tools bundled with macOS still trust them. The macOS 27.2 update released on 26 October failed to fix the problem and even reverted a manual workaround some users had applied, leaving them exposed again. Many other open-source projects had already shipped fixes days earlier.