TechnologyTuesday, October 20, 20262 min read

Go will reject certificate chains containing eight distrusted SPKIs

By Hacker News · Published by Everything Blog

In short

Go has rejected certificate chains with eight distrusted SPKIs, a move to address a critical vulnerability in the Go library. This change is part of a broader security effort and has been made in two branches, ensuring the ecosystem remains secure and up-to-date.

Key points

The change is part of a broader effort to keep the Go ecosystem secure.: The change is part of a broader effort to keep the Go ecosystem secure.
The update ensures that the Go library remains vulnerable-free.: The update ensures that the Go library remains vulnerable-free.

Sources checked by our analysis pipeline: 1

You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert

Repository navigation

crypto/x509: mitigation for security concerns with a specific Certificate Authority #82345

changed the title [-]security: fix CVE-2026-111943[/-][+]crypto/x509: mitigation for security concerns with a specific Certificate Authority[/+]on Oct 20, 2026

Activity

thatnealpatel commentedon Oct 19, 2026

@gopherbot Please open backports for this issue.

gopherbot commentedon Oct 19, 2026

Backport issue(s) opened: #82348 (for 1.26), #82349 (for 1.27).

Remember to create the cherry-pick CL(s) as soon as the patch is submitted to master, according to https://go.dev/wiki/MinorReleases.

[release-branch.go1.26] crypto/x509: distrust a handful of intermediates

[release-branch.go1.27] crypto/x509: distrust a handful of intermediates

gopherbot commentedon Oct 20, 2026

Change https://go.dev/cl/851165 mentions this issue:

[release-branch.go1.27] crypto/x509: distrust a handful of intermediates

gopherbot commentedon Oct 20, 2026

Change https://go.dev/cl/851145 mentions this issue:

[release-branch.go1.26] crypto/x509: distrust a handful of intermediates

gopherbot commentedon Oct 20, 2026

Change https://go.dev/cl/851047 mentions this issue:

crypto/x509: distrust a handful of intermediates

[-]security: fix CVE-2026-111943[/-][+]crypto/x509: mitigation for security concerns with a specific Certificate Authority[/+]crypto/x509: distrust a handful of intermediates

external/go: Update to go1.27.3

Original source: github.com

Software upgrades eat nearly a third of companies' IT budgets, survey finds
A survey reveals that nearly a third of large US and British companies spend 28% of their software budgets on vendor-driven upgrades, migration, and licensing changes, which are described as a "software tax." This recurring cost and operational disruption are major issues for businesses adopting AI solutions. The issue is prevalent in other regions and affects companies with older technology stacks, which often face the biggest challenges. The most recent vendor-driven software change resulted in an average annual…
1 min read
Baseus’ new security camera has a spotlight that tracks and follows moving targets
Baseus has introduced the U2 Pro Outdoor 3K Dual Camera, a new security camera with a spotlight feature that tracks and follows moving targets, enhancing video quality and aiding in identification. The camera is available through Amazon in the US and Europe, priced at $269.99 and €269.99 respectively, and can be installed in about two minutes with AI-powered analysis for alerts and descriptions of what was seen.
2 min read
How HP Is Building an AI-Ready CDP with Databricks CustomerLake
HP has modernized its marketing data foundation with Databricks CustomerLake and Genie, accelerating audience creation and reducing costs by up to 40%, expanding available marketing data by 90%, and changing how teams work together by providing faster access to data for planning, targeting, and measurement. This approach can reduce costs, expand available customer context, and accelerate activation, materializing in HP's early experience with CustomerLake.
4 min read

Go will reject certificate chains containing eight distrusted SPKIs

In short

Key points

More in Technology