CESA-2017:1859 -- centos 7 golangID: oval:org.secpod.oval:def:204664 | Date: (C)2018-04-30 (M)2022-10-10 |
Class: PATCH | Family: unix |
The golang packages provide the Go programming language compiler. The following packages have been upgraded to a later upstream version: golang . Security Fix: * A carry propagation flaw was found in the implementation of the P-256 elliptic curve in golang. An attacker could possibly use this flaw to extract private keys when static ECDH was used. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.