A flaw was found in CHICKEN Scheme symbol table randomization algorithm. The code that sets up the initial symbol table is run _before_ initializing the PRNG, which means the randomization factor uses the initial libc seed state. On most libc implementations this means the symbol table randomization factor is a constant value which does not differ between runs. Upstream patch: http://lists.gnu.org/archive/html/chicken-hackers/2017-06/txtod8Pa1wGU0.txt References: http://seclists.org/oss-sec/2017/q3/174 http://lists.nongnu.org/archive/html/chicken-announce/2017-07/msg00000.html
Created chicken tracking bugs for this issue: Affects: epel-all [bug 1471818] Affects: fedora-all [bug 1471817]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.