Bug 241718 (CVE-2007-2453)

Summary: CVE-2007-2453 /dev/random broken
Product: [Other] Security Response Reporter: Mark J. Cox <mjc>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Status: CLOSED ERRATA QA Contact:
Severity: urgent Docs Contact:
Priority: urgent    
Version: unspecifiedCC: dzickus, jburke, lsmid, lwang
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: RHBA-2007-0959 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-11-07 19:50:16 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
proposed patch none

Comment 2 Mark J. Cox 2007-05-29 19:15:51 UTC
Created attachment 155620 [details]
proposed patch

Comment 4 RHEL Program Management 2007-05-29 20:23:59 UTC
This request was evaluated by Red Hat Product Management for inclusion in a Red
Hat Enterprise Linux maintenance release.  Product Management has requested
further review of this request by Red Hat Engineering, for potential
inclusion in a Red Hat Enterprise Linux Update release for currently deployed
products.  This request is not yet committed for inclusion in an Update
release.

Comment 12 Mark J. Cox 2007-05-30 11:01:13 UTC
fixes were committed into git:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=summary

Comment 14 RHEL Program Management 2007-06-01 19:21:54 UTC
This request was evaluated by Red Hat Kernel Team for inclusion in a Red
Hat Enterprise Linux maintenance release, and has moved to bugzilla 
status POST.

Comment 15 Mark J. Cox 2007-06-12 13:29:24 UTC
removing embargo, issue is public.

Comment 16 Don Zickus 2007-06-12 18:46:46 UTC
in 2.6.18-24.el5
You can download this test kernel from http://people.redhat.com/dzickus/el5

Comment 18 Mike Gahagan 2007-07-31 17:16:28 UTC
Verified patch is in and we have been carrying it since it went into the
z-stream kernels.


Comment 20 errata-xmlrpc 2007-11-07 19:50:16 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2007-0959.html