Re: Re: CVE request: libressl before 2.0.2 under linux PRNG failure

[Stuart Henderson <stu () spacehopper org>]

> > https://www.agwa.name/blog/post/libressls_prng_is_unsafe_on_linux
>
> > forking a process can create repeated random numbers
>
> > Please assign CVE.
>
> The existence of a popular blog post discussing a number of
> interrelated LibreSSL and OpenSSL issues doesn't mean that we have a
> good way to proceed by assigning a single CVE ID.

I see a number of web pages relating to this issue are mentioning that
it has already been assigned CVE-2014-2970, can anyone throw light on this?