RC F'13, F2'17
Cryptogopher / Go cryptography maintainer
Geomys founder (https://geomys.org)
https://mkcert.dev / https://age-encryption.org / https://sunlight.dev
🕳️ “Gaze not into the abyss, lest you become recognized as an abyss domain expert, and they expect you keep gazing into the damn thing.” —@nickm
https://filippo.io/newsletter
THIS IS NOT A DRILL.
If you package/distribute/maintain root stores or chain verifiers, act immediately.
If you know how to remove trust in a root, consider doing it now.
Otherwise, prepare to update systems as patches/mitigations come.
Go users, update to Go 1.27.3 or Go 1.26.10.
https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/0XofdebrAAAJ
RE: https://hachyderm.io/@golang/117470816794707999
Update everything that verifies certificates against public roots.
🥳 Go 1.27.3 and 1.26.10 are released! 🔏 Security: Includes 1 security fixes to the standard library. 📣 Announcement: https://groups.google.com/g/golang-announce/c/66pojueaQek/m/tmWX2Pq9AgAJ 📦 Download: https://go.dev/dl/#go1.27.3 #golang
Hachyderm.iogolang (@[email protected])Attached: 1 image
🥳 Go 1.27.3 and 1.26.10 are released!
🔏 Security: Includes 1 security fixes to the standard library.
📣 Announcement: https://groups.google.com/g/golang-announce/c/66pojueaQek/m/tmWX2Pq9AgAJ
📦 Download: https://go.dev/dl/#go1.27.3
#golang