Bug 581352

Summary:	<kde-frameworks/kcoreaddons-5.21.0-r1: weak random number generator
Product:	Gentoo Security	Reporter:	Johannes Huber (RETIRED) <johu>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	trivial
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://mail.kde.org/pipermail/kde-distro-packagers/2016-April/000157.html
Whiteboard:	~4 [noglsa]
Package list:		Runtime testing required:	---

Description Johannes Huber (RETIRED) gentoo-dev

2016-04-27 11:41:47 UTC

Regression introduced in version 5.21.0. Fixed in upstream master repository already. Will backport the patch asap. According to repository history stable version (5.18.0) is not affected.

Comment 1 Johannes Huber (RETIRED) gentoo-dev

2016-04-27 11:52:17 UTC

Bugfix:
https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=54fb35c25f20b7dd790c415b604a9163fe80db04

Cleanup:
https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a3782fd6b95503e19bcd400e5c5b2d975e5c60ce

Comment 2 Johannes Huber (RETIRED) gentoo-dev

2016-04-27 15:07:04 UTC

Thanks, removing kde from cc then.

Comment 3 Aaron Bauman (RETIRED) gentoo-dev

2016-05-30 03:34:55 UTC

Fixed per previous comments.