CVE catalog
CVE-2017-8932
UBUNTU-CVE-2017-8932
- Severity
- Medium · CVSS 5.9
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 2.23% · Oct 27, 2026
This update for go fixes the following issues: - CVE-2017-8932: Add patch to fix carry bug in x86-64 P-256 implementation (boo#1040618) Please note that go applications will need to be rebuilt to get this fix, as all go applications are statically linked. As we are regulary releasing updates to our distribution go applications they are not specifically included here.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Suse | go | package hub 12 | 1.7.0-12.1 | fixed |
| Suse | go | package hub 12 | 1.7.0-12.1 | fixed |
| Suse | containerd | openstack cloud 6 | 0.2.5+gitr639_422e31c-20.2 | fixed |
| Suse | docker | openstack cloud 6 | 17.04.0_ce-98.2 | fixed |
| Suse | golang-github-docker-libnetwork | openstack cloud 6 | 0.0.0+git20170119.7b2b1fe-4.1 | fixed |
| Suse | runc | openstack cloud 6 | 0.1.1+gitr2947_9c2d8d1-20.3 | fixed |
| Suse | containerd | linux enterprise module for containers 12 | 0.2.5+gitr639_422e31c-20.2 | fixed |
| Suse | docker | linux enterprise module for containers 12 | 17.04.0_ce-98.2 | fixed |
| Suse | docker-distribution | linux enterprise module for containers 12 | 2.6.1-15.2 | fixed |
| Suse | golang-github-docker-libnetwork | linux enterprise module for containers 12 | 0.0.0+git20170119.7b2b1fe-4.1 | fixed |
| Suse | runc | linux enterprise module for containers 12 | 0.1.1+gitr2947_9c2d8d1-20.3 | fixed |
| Ubuntu | golang-1.6 | 16.04 | 1.6-0ubuntu1 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6-0ubuntu2 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6-0ubuntu3 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6-0ubuntu4 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6-0ubuntu5 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6.1-0ubuntu1 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6.2-0ubuntu5~16.04 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6.2-0ubuntu5~16.04.2 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6.2-0ubuntu5~16.04.3 | vulnerable |
| Ubuntu | golang-1.6 | 16.04 | 1.6.2-0ubuntu5~16.04.4 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Suse | go | rpm | package hub 12 | 1.7.0-12.1 | Not reported | OPENSUSE-SU-2017:1649-1 | Not reported |
| Suse | go | rpm | package hub 12 | 1.7.0-12.1 | Not reported | OPENSUSE-SU-2017:1650-1 | Not reported |
| Suse | containerd | rpm | openstack cloud 6 | 0.2.5+gitr639_422e31c-20.2 | Not reported | SUSE-RU-2017:1965-1 | Not reported |
| Suse | docker | rpm | openstack cloud 6 | 17.04.0_ce-98.2 | Not reported | SUSE-RU-2017:1965-1 | Not reported |
| Suse | golang-github-docker-libnetwork | rpm | openstack cloud 6 | 0.0.0+git20170119.7b2b1fe-4.1 | Not reported | SUSE-RU-2017:1965-1 | Not reported |
| Suse | runc | rpm | openstack cloud 6 | 0.1.1+gitr2947_9c2d8d1-20.3 | Not reported | SUSE-RU-2017:1965-1 | Not reported |
| Suse | containerd | rpm | linux enterprise module for containers 12 | 0.2.5+gitr639_422e31c-20.2 | Not reported | SUSE-RU-2017:1965-1 | Not reported |
| Suse | docker | rpm | linux enterprise module for containers 12 | 17.04.0_ce-98.2 | Not reported | SUSE-RU-2017:1965-1 | Not reported |
| Suse | docker-distribution | rpm | linux enterprise module for containers 12 | 2.6.1-15.2 | Not reported | SUSE-RU-2017:1965-1 | Not reported |
| Suse | golang-github-docker-libnetwork | rpm | linux enterprise module for containers 12 | 0.0.0+git20170119.7b2b1fe-4.1 | Not reported | SUSE-RU-2017:1965-1 | Not reported |
| Suse | runc | rpm | linux enterprise module for containers 12 | 0.1.1+gitr2947_9c2d8d1-20.3 | Not reported | SUSE-RU-2017:1965-1 | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2017_1859.json]
- [https://osv.dev/vulnerability/SUSE-RU-2017:1965-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2017-8932]
- [https://osv.dev/vulnerability/openSUSE-SU-2017:1649-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2017:1650-1]
- [https://security.access.redhat.com/data/csaf/v2/vex/2017/cve-2017-8932.json]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]