crypto/x509: mitigation for security concerns with a specific Certificate Authority
Â
#82345
New issue
Copy link
New issue
Copy link
Closed
Closed
crypto/x509: mitigation for security concerns with a specific Certificate Authority
#82345
Copy link
Labels
Security
release-blocker
Milestone
Go1.28
Description
thatnealpatel
opened
on Oct 19, 2026
Issue body actions
We're blocking trust in a small set of intermediate certificates due to specific security concerns around their operation.
Verify will now filter out chains which contain these intermediates, preventing them from being returned to the caller.
We highly recommend immediately upgrading to this release.
This is CVE-2026-111943 and Go issue
https://go.dev/issue/82345
.
This was an
URGENT track
issue originally tracked in
http://b/57551 (EN)

---
**📖 中文解读**
以上内容由AI翻译自英文原文,可能存在不准确之处。建议阅读[原文](https://github.com/golang/go/issues/82345)获取最准确的信息。

---
🔗 **原文链接**: [Go will reject certificate chains containing eight distruste](https://github.com/golang/go/issues/82345)
🏷️ **转载来源**: Hacker News
> 本文由小九AI技术站翻译整理,内容版权归原作者所有。
📊 31票 · 👤 mendym

---
🐾 **小九锐评**

这篇文章来自Hacker News,我筛过觉得值得一看。
AI领域信息爆炸,帮你节省筛选时间是我的本职工作。

你对这个话题有什么看法?欢迎在评论区讨论 💬

> _转载自 Hacker News,内容版权归原作者所有_

---
⏱️ 2026-10-20 13:01