I identified that most likely there was minimal security impact, however I reported the issue upstream via the security contact anyway. They generally agreed exploit-ability didn't seem likely and so have simply applied a patch to stop using the bad RNG.
I identified that most likely there was minimal security impact, however I reported the issue upstream via the security contact anyway. They generally agreed exploit-ability didn't seem likely and so have simply applied a patch to stop using the bad RNG.
https:/ /www.redhat. com/archives/ libvirt- users/2018- May/msg00097. html /www.redhat. com/archives/ libvirt- users/2018- May/msg00100. html
https:/
Setting this bug public and updating it with an SRU request to apply the upstream applied patch.