Advisory: Gentoo Essential and Critical Security Patch Updates

Find the information you need for your favorite open source distribution .

Gentoo: vnc Insecure cookie generation

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

The VNC server acts as an X server, but the script for starting itgenerates an MIT X cookie (which is used for X authentication) withoutusing a strong enough random number generator. This could allow anattacker to be able to more easily guess the authentication cookie.

Gentoo: tightvnc Insecure cookie generation

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

The VNC server acts as an X server, but the script for starting itgenerates an MIT X cookie (which is used for X authentication) withoutusing a strong enough random number generator. This could allow anattacker to be able to more easily guess the authentication cookie.