Accepting request 486299 from home:pgajdos

- security update: initialize random generator, CVE-2015-9019 
  [bsc#934119]

OBS-URL: https://build.opensuse.org/request/show/486299
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libxslt?expand=0&rev=57
This commit is contained in:
Ismail Dönmez 2017-04-07 08:41:51 +00:00 committed by Git OBS Bridge
parent 05583ee011
commit e8f3aa2469
2 changed files with 3 additions and 2 deletions

View File

@ -34,7 +34,7 @@ index 6b24dbe0..b7a8d6e1 100644
+ int fd = open("/dev/urandom",O_RDONLY); + int fd = open("/dev/urandom",O_RDONLY);
+ +
+ seed = time(NULL); /* just in case /dev/urandom is not there */ + seed = time(NULL); /* just in case /dev/urandom is not there */
+ if (fd == -1) { + if (fd != -1) {
+ read (fd, &seed, sizeof(seed)); + read (fd, &seed, sizeof(seed));
+ close (fd); + close (fd);
+ } + }

View File

@ -1,7 +1,8 @@
------------------------------------------------------------------- -------------------------------------------------------------------
Wed Apr 5 07:46:27 UTC 2017 - pgajdos@suse.com Wed Apr 5 07:46:27 UTC 2017 - pgajdos@suse.com
- security update: initialize random generator [bsc#934119] - security update: initialize random generator, CVE-2015-9019
[bsc#934119]
+ libxslt-random-seed.patch + libxslt-random-seed.patch
------------------------------------------------------------------- -------------------------------------------------------------------