packages:
  - module: std
    package: crypto/x509
    symbols:
      - Certificate.Verify
    versions:
      - fixed: go1.13.13
      - fixed: go1.14.5
description: |
    X509 Certificate verification does not validate KeyUsages EKU
    requirements on Windows if VerifyOptions.Roots is nil.
published: 2022-01-04T18:11:08Z
cves:
  - CVE-2020-14039
credit: Niall Newman
os:
  - windows
links:
    pr: https://go.dev/cl/242597
    commit: https://go.googlesource.com/go/+/82175e699a2e2cd83d3aa34949e9b922d66d52f5
    context:
      - https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w