https://bugzilla.redhat.com/show_bug.cgi?id=1455189
Bug ID: 1455189
Summary: CVE-2017-8932 golang: Elliptic curvers carry
propagation issue in x86-64 P-256
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: admiller(a)redhat.com, amurdaca(a)redhat.com,
aortega(a)redhat.com, apevec(a)redhat.com,
ayoung(a)redhat.com, bleanhar(a)redhat.com,
ccoleman(a)redhat.com, chrisw(a)redhat.com,
cvsbot-xmlrpc(a)redhat.com, dedgar(a)redhat.com,
dmcphers(a)redhat.com,
golang-updates(a)lists.fedoraproject.org,
jcajka(a)redhat.com, jgoulding(a)redhat.com,
jjoyce(a)redhat.com, jkeck(a)redhat.com,
joelsmith(a)redhat.com, jschluet(a)redhat.com,
kbasil(a)redhat.com, kseifried(a)redhat.com,
lemenkov(a)gmail.com, lhh(a)redhat.com, lpeer(a)redhat.com,
markmc(a)redhat.com, rbryant(a)redhat.com,
renich(a)woralelandia.com, sclewis(a)redhat.com, s(a)shk.io,
tdecacqu(a)redhat.com, ttomecek(a)redhat.com,
vbatts(a)redhat.com
A carry propagation issue was found in the P-256 implementation for x86-64 in
golang.
Upstream issue:
https://github.com/golang/go/issues/20040
Upstream patch:
https://golang.org/cl/41070
--
You are receiving this mail because:
You are on the CC list for the bug.