MNBSD-2008-10: arc4random insufficient entropy at system startup

Description

The arc4random(9) random number framework did not obtain enough entropy at boot, so system services relying on it received predictable random numbers; GEOM classes initialized at startup remained affected. Users were advised to update to RELENG_0_2 (MidnightBSD 0.2.1-p3). This corresponds to FreeBSD-SA-08:11.arc4random.

Affected Versions

kernel

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-08:11.arc4random.asc
• https://www.cve.org/CVERecord?id=CVE-2008-5162

Additional Information

Aliases: CVE-2008-5162

Published: November 24, 2008
Last Modified: November 24, 2008