Cyber ·
Go 1.27.3 and Go 1.26.10 released with a security fix in crypto/x509
Go 1.27.3 and Go 1.26.10 are released as minor point versions, with one security fix tied to CA certificate removal, according to the release message published on October 20, 2026.
On October 20, 2026, the Go team announced Go 1.27.3 and Go 1.26.10, described as minor point releases. According to the announcement, each includes one security fix, handled under the project's security policy. The security list item names the crypto/x509 package as the affected area, and the title links the fix to CA certificate removal. The text available for this record is truncated, so no further details about impact, severity or affected earlier versions are given.
To consult and verify, read the original release message and the official Go release notes on the project's website, reached through the announcement list and the oss-sec feed cited in the source. Before acting on any conclusion, confirm the version in your own environment with the Go version command and compare it with the list of fixed releases. If your organization uses AI to study this update, do not paste internal code, configurations or certificates containing personal data or credentials. Rota's protection covers personal data such as CPF, CNPJ, e-mail, phone numbers and names, but it is not a secret scanner; remove keys and passwords before sending any excerpt.
Original source: Go 1.27.3 e Go 1.26.10 são lançados para remoção de certificado de CA