<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On 4 December 2015 at 02:01, Yuanjie Huang <span dir="ltr"><<a href="mailto:Yuanjie.Huang@windriver.com" target="_blank">Yuanjie.Huang@windriver.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div id=":axo" class="a3s" style="overflow:hidden">The std::random_device class in libstdc++ in the GNU Compiler Collection<br>
(aka <span class="il">GCC</span>) before 4.9.4 does not properly handle short reads from<br>
blocking sources, which makes it easier for context-dependent attackers<br>
to predict the random values via unspecified vectors.<br></div></blockquote></div><br></div><div class="gmail_extra">I see from the CVE that 5.2 is also affected - will you be submitting patches for that too?</div><div class="gmail_extra"><br></div><div class="gmail_extra">Ross</div></div>