THIS IS NOT A DRILL.

If you package/distribute/maintain root stores or chain verifiers, act immediately.

If you know how to remove trust in a root, consider doing it now.

Otherwise, prepare to update systems as patches/mitigations come.

Go users, update to Go 1.27.3 or Go 1.26.10.

https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/0XofdebrAAAJ