Go 1.27.4 and 1.26.11 fix 12 security bugs, 11 of them cgo build-time code execution flaws. What is affected, how to upgrade and what now fails.