The Go team has released emergency updates for versions 1.27.3 and 1.26.10, forcing the certificate verifier to reject any chains passing through eight specific intermediate certificate authority keys. Applications built with these new versions will automatically refuse connections to endpoints utilizing certificates issued by these keys, acting as a preemptive measure due to undisclosed security concerns regarding the affected authority.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →