Which Go versions include the crypto/x509 security update?
Go's release history lists Go 1.27.3 and Go 1.26.10, both released Oct. 19, 2026, as including crypto/x509 security fixes. Check the official release history for the current supported patch line before upgrading.
Answered in
Go 1.27.3 and 1.26.10 Update Certificate-Chain VerificationGo’s Oct. 19 security patches make crypto/x509 reject chains containing a small set of intermediates; rebuild affected binaries to apply the change.
Read the full analysisOther questions this article answers
More tech questions
- Does GitHub public monitoring scan an enterprise’s private repositories?
- How does GitHub attribute a public secret to a data-residency enterprise?
- Who can use public monitoring with data residency?
- Does IBM Unified Key Orchestrator for Secure Room Operation make an organization post-quantum secure?
- What does dual control mean in secure key operations?
- Where should an organization begin a post-quantum migration?
- What does a forward-deployed engineer do on an AI project?
- Does a one-gigawatt virtual power plant generate one gigawatt of electricity?
Every answer on Crashtech is written by the editor of the article it comes from — never auto-summarised. Browse all answers or the Tech beat.