Gentoo Linux Security Advisory [UPDATE] GLSA 200804-22:03 – Amit Klein of Trusteer reported that insufficient randomness is used to calculate the TRXID values and the UDP source port numbers (CVE-2008-1637). Thomas Biege of SUSE pointed out that a prior fix to resolve this issue was incomplete, as it did not always enable the stronger random number generator for source port selection (CVE-2008-3217). Versions less than 3.1.6 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/69305/glsa-200804-22-03.txt
Source: https://packetstormsecurity.com/files/69305/Gentoo-Linux-Security-Advisory-200804-22.html