module: std | |
package: crypto/x509 | |
versions: | |
- fixed: go1.13.13 | |
- fixed: go1.14.5 | |
description: | | |
X509 Certificate verification does not validate KeyUsages EKU | |
requirements on Windows if VerifyOptions.Roots is nil. | |
cves: | |
- CVE-2020-14039 | |
credit: Niall Newman | |
symbols: | |
- Certificate.Verify | |
os: | |
- windows | |
links: | |
pr: https://go.dev/cl/242597 | |
commit: https://go.googlesource.com/go/+/82175e699a2e2cd83d3aa34949e9b922d66d52f5 | |
context: | |
- https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w |