Skip to content
OpenAdvisories
Medium ELSA-2017-1859 1 CVE

Moderate: golang security, bug fix, and enhancement update (Oracle Linux 7)

Published Aug 9, 2017 · Updated Aug 9, 2017

Ecosystem: Oracle Linux

Summary

[1.8.3-1]
- bump to 1.8.3
- fix CVE-2017-8932
- Resolves: rhbz#1452616, rhbz#1452241, rhbz#1457169, rhbz#1448346

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 7 golang 0:1.8.3-1.el7
Oracle Linux · 7 golang-bin 0:1.8.3-1.el7
Oracle Linux · 7 golang-docs 0:1.8.3-1.el7
Oracle Linux · 7 golang-misc 0:1.8.3-1.el7
Oracle Linux · 7 golang-src 0:1.8.3-1.el7
Oracle Linux · 7 golang-tests 0:1.8.3-1.el7

Vulnerabilities 1

  • Unscored —
    CVE-2017-8932

    Incorrect computation for P-256 curves in crypto/elliptic

    A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively ext…

    stdlib golang-1.6 Ubuntu Go