Skip to content

Go 1.27.3 - #193

Merged
bradfitz merged 3 commits into
tailscale.go1.27from
bradfitz/go1.27.3
Oct 20, 2026
Merged

bradfitz merged 3 commits into
tailscale.go1.27from
bradfitz/go1.27.3

Conversation

@bradfitz

@bradfitz bradfitz commented Oct 20, 2026 •

Copy link
Copy Markdown
Member
  • [release-branch.go1.27] crypto/x509: distrust a handful of intermediates
  • [release-branch.go1.27] go1.27.3

Updates https://github.com/tailscale/corp/issues/50253

rolandshoemaker and others added 3 commits October 19, 2026 18:14
Filter a set of intermediates from chains returned by calls to Verify.
These chains are identified via SHA-256 SPKI hashes.

Fixes CVE-2026-111943
For golang#82345
Fixes golang#82349

Change-Id: I43172dd50560eb7d1a80bc2554a67234d3029501
Reviewed-on: https://go-internal-review.googlesource.com/c/go/+/6380
Reviewed-by: Nicholas Husin <husin@google.com>
Reviewed-by: Neal Patel <nealpatel@google.com>
Reviewed-by: David Chase <drchase@google.com>
Reviewed-on: https://go-internal-review.googlesource.com/c/go/+/6400
Reviewed-by: Roland Shoemaker <bracewell@google.com>
Reviewed-on: https://go-review.googlesource.com/c/go/+/851165
Auto-Submit: Gopher Robot <gobot@golang.org>
Reviewed-by: Carlos Amedee <carlos@golang.org>
TryBot-Bypass: Gopher Robot <gobot@golang.org>
Change-Id: Icf51c3e5809b43e3137f6e269b1196ec9f74626e
Reviewed-on: https://go-review.googlesource.com/c/go/+/851146
TryBot-Bypass: Gopher Robot <gobot@golang.org>
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
Reviewed-by: Carlos Amedee <carlos@golang.org>
Auto-Submit: Gopher Robot <gobot@golang.org>
@bradfitz
bradfitz merged commit 7ef7b40 into tailscale.go1.27 Oct 20, 2026
5 checks passed
@bradfitz
bradfitz deleted the bradfitz/go1.27.3 branch October 20, 2026 02:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants