Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns

The Go team has released emergency updates, versions 1.27.3 and 1.26.10, due to undisclosed security concerns. These updates modify Go's certificate verifier to reject certificate chains that pass through eight specific intermediate certificate authority keys. As a result, programs built on these new releases will not connect to sites and services with certificates issued under those keys. The affected keys belong to a single certificate authority, which has not been named. The updates were released on October 20. Programs using the updated Go versions will refuse connections to affected sites and services.