Apple blocks compromised eMudhra certificates in Safari, yet says its macOS git and curl can still accept them until a future update. Dennis Jackson reports macOS 27.2 also reverted manual fixes. Apple offers a workaround and warns removing the roots can break some legitimate sites; recheck after updates.
we-have-a-problem.comApple's git still trusts the compromised eMudhra certificatesEleven days after Apple was notified of the eMudhra CA compromise, the git, curl and python3 that Apple ships with macOS still trust the compromised certificates.