—

GO-2025-4013

Panic when validating certificates with DSA public keys in crypto/x509

Quick fix

GO-2025-4013 — stdlib: upgrade to the fixed version with the command below.

go get stdlib@v1.24.8

Details

Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method.

This affects programs which validate arbitrary certificate chains.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / stdlib

Introduced in: 0 Fixed in: 1.24.8

Fix go get stdlib@v1.24.8

References

https://go.dev/cl/709853 [FIX]
https://go.dev/issue/75675 [REPORT]
https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI [WEB]