<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/">
<channel>
  <title>github.com/golang</title>
  <link>https://aggr.aymericbeaumet.com/sources/github.com/golang/</link>
  <description>Browse aymeric&#39;s, an independent, searchable archive of readable snapshots from followed feeds, preserved in Git with aggr.</description>
  <language>en</language>
  <atom:link href="https://aggr.aymericbeaumet.com/sources/github.com/golang/rss.xml" rel="self" type="application/rss+xml"/>
  <lastBuildDate>Tue, 20 Oct 2026 03:05:07 +0000</lastBuildDate>
  <generator>aggr</generator>
  <item>
    <title>Go will reject certificate chains containing eight distrusted SPKIs</title>
    <link>https://aggr.aymericbeaumet.com/items/hnrss-org/2026-10-20-go-will-reject-certificate-chains-containing-eight/</link>
    <guid isPermaLink="false">urn:aggr:item:4347f42328fd94681cbc95ff2ab6ec771c79fc6d</guid>
    <atom:link href="https://github.com/golang/go/issues/82345" rel="via" type="text/html"/>
    <pubDate>Tue, 20 Oct 2026 03:05:07 +0000</pubDate>
    <dc:creator>mendym</dc:creator>
    <description>We&#39;re blocking trust in a small set of intermediate certificates due to specific security concerns around their operation. Verify will now filter out chains which contain these intermediates, preventing them from being returned to the…</description>
    <content:encoded>&lt;p&gt;We&#39;re blocking trust in a small set of intermediate certificates due to specific security concerns around their operation.&lt;/p&gt;
&lt;p&gt;Verify will now filter out chains which contain these intermediates, preventing them from being returned to the caller.&lt;/p&gt;
&lt;p&gt;We highly recommend immediately upgrading to this release.&lt;/p&gt;
&lt;p&gt;This is CVE-2026-111943 and Go issue &lt;a target=&quot;_blank&quot; rel=&quot;noopener noreferrer&quot; href=&quot;https://go.dev/issue/82345&quot;&gt;https://go.dev/issue/82345&lt;/a&gt;.&lt;/p&gt;
&lt;hr /&gt;
&lt;p&gt;This was an &lt;a target=&quot;_blank&quot; rel=&quot;noopener noreferrer&quot; href=&quot;https://go.dev/doc/security/policy#urgent&quot;&gt;URGENT track&lt;/a&gt; issue originally tracked in &lt;a target=&quot;_blank&quot; rel=&quot;noopener noreferrer&quot; href=&quot;http://b/575512169&quot;&gt;http://b/575512169&lt;/a&gt;.&lt;/p&gt;
</content:encoded>
    <category>news</category>
  </item>
</channel>
</rss>
