Skip to content
OpenAdvisories
Unscored RHSA-2017:1859 2 CVEs

Red Hat Security Advisory: golang security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated May 13, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::server golang 0:1.8.3-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server golang-bin 0:1.8.3-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server golang-docs 0:1.8.3-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server golang-misc 0:1.8.3-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server golang-src 0:1.8.3-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server golang-tests 0:1.8.3-1.el7

Vulnerabilities 2

  • Unscored —
    CVE-2017-1000098

    Denial of service when parsing large forms in mime/multipart

    The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "maxMemory" limit. It was possible for an attacker to generate a multipart request crafted such that the server ran out o…

    golang stdlib golang-1.6 Ubuntu Azure Linux Go
  • Unscored —
    CVE-2017-8932

    Incorrect computation for P-256 curves in crypto/elliptic

    A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively ext…

    stdlib golang-1.6 Ubuntu Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1381593
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1405587
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1444122
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1452241
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1452616
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1455189
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1859.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-8932
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-8932
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-8932
  • report
    https://access.redhat.com/security/cve/CVE-2017-1000098
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1401985
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-1000098
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-1000098
  • article
    https://groups.google.com/forum/#!msg/golang-dev/4NdLzS8sls8/uIz8QlnIBQAJ