Stay Secure with the Latest Linux Advisories

security advisorymoderateencryption

SciLinux: SLSA-2017-1859-1 Moderate: Golang Carry Flaw Security Threat

A carry propagation flaw was found in the implementation of the P-256 elliptic curve in golang. An attacker could possibly use this flaw to extract private keys when static ECDH was used. (CVE-2017-8932) SL7 x86_64 golang-docs-1.8.3-1.el7.noarch.rpm golang-misc-1.8.3-1.el7.noarch.rpm golang-src-1.8.3-1.el7.noarch.rpm golang-tests-1.8.3-1.el7.noarch.rpm golang-bin-1.8 [More...]. Synopsis: Moderate: golang security, bug fix, and enhancement Advisory ID: SLSA-2017:1859-1 Issue Date: 2017-08-01 CVE Numbers: CVE-2017-8932 -- The following packages have been upgraded to a later upstream version: golang (1.8.3). Security Fix(es): * A carry propagation flaw was found in the implementation of the P-256 elliptic curve in golang. An attacker could possibly use this flaw to extract private keys when static ECDH was used. (CVE-2017-8932) -- SL7 x86_64 golang-docs-1.8.3-1.el7.noarch.rpm golang-misc-1.8.3-1.el7.noarch.rpm golang-src-1.8.3-1.el7.noarch.rpm golang-tests-1.8.3-1.el7.noarch.rpm golang-bin-1.8.3-1.el7.x86_64.rpm golang-1.8.3-1.el7.x86_64.rpm - Scientific Linux Development Team . Cautious notice for golang remedy tackling a propagation issue in elliptic curve which results in possible key disclosure vulnerabilities.. Golang Security Fix, EL7 Updates, Scientific Linux Threat, ECDH Implementation, Carry Flaw Advisory. . LinuxSecurity.com Team

Aug 21, 2017 Scientific Linux