SciLinux: SLSA-2017-1859-1 Moderate: Golang Carry Flaw Security Threat

A carry propagation flaw was found in the implementation of the P-256 elliptic curve in golang. An attacker could possibly use this flaw to extract private keys when static ECDH was used. (CVE-2017-8932) SL7 x86_64 golang-docs-1.8.3-1.el7.noarch.rpm golang-misc-1.8.3-1.el7.noarch.rpm golang-src-1.8.3-1.el7.noarch.rpm golang-tests-1.8.3-1.el7.noarch.rpm golang-bin-1.8 [More...]

Synopsis:          Moderate: golang security, bug fix, and enhancement 
Advisory ID:       SLSA-2017:1859-1
Issue Date:        2017-08-01
CVE Numbers:       CVE-2017-8932
--

The following packages have been upgraded to a later upstream version:
golang (1.8.3).

Security Fix(es):

* A carry propagation flaw was found in the implementation of the P-256
elliptic curve in golang. An attacker could possibly use this flaw to
extract private keys when static ECDH was used. (CVE-2017-8932)
--

SL7
  x86_64
    golang-docs-1.8.3-1.el7.noarch.rpm 
    golang-misc-1.8.3-1.el7.noarch.rpm 
    golang-src-1.8.3-1.el7.noarch.rpm 
    golang-tests-1.8.3-1.el7.noarch.rpm 
    golang-bin-1.8.3-1.el7.x86_64.rpm 
    golang-1.8.3-1.el7.x86_64.rpm 

- Scientific Linux Development Team