From GitHub · thatnealpatel · · 50s
Go blocks trust in 3 eMudhra intermediate certificates
Go 1.28 releases fix for security flaws in eMudhra TLS certificates.
In brief
Go 1.28 releases fix for security flaws in eMudhra TLS certificates. Go 1.28 blocks trust in eMudhra intermediate certificates due to security concerns. Originally reported by GitHub.
Go 1.28 security update
Go 1.28 releases block trust in specific eMudhra intermediate certificates due to security concerns.
Security issue details
The issue involves 3 eMudhra intermediate certificates with security flaws that could compromise trust.
CVE-2026-111943
This security flaw is tracked as CVE-2026-111943 and affects Go 1.28 releases.
“CVE-2026-111943”
Affected certificates
eMudhra TLS certificates with security flaws include EM DV TLS CA, EM EV TLS CA, and EM OV TLS CA.
Immediate action
Go 1.28 blocks trust in these intermediates to prevent security risks from being returned to callers.
Urgent fix
The fix was implemented in Go 1.28 and backported to 1.26 and 1.27 for immediate security.
The bottom line
Go 1.28 blocks trust in eMudhra intermediate certificates due to security concerns.
