Red Hat Security AdvisoryRHSA-2017:1859
golang security, bug fix, and enhancement update
Released 2017-08-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server Optional (v. 7) golang-1.8.3-1.el7, golang-bin-1.8.3-1.el7, golang-docs-1.8.3-1.el7 +3
Fixes 2 records
Priority LOW 37
The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "maxMemory" limit.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02078 · Published 2017-10-04 · Partial fix CWE-769
Priority LOW 31
A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02225 · Published 2017-07-06 · Partial fix CWE-682
