ALAS2-2026-3343 — Moderate: perl-Crypt-PasswdMD5 security update (Amazon Linux 2)

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-6659: Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function is predictable, and unsuitable for cryptography.

Fixed packages 1

Release	Package	Fixed in
Amazon Linux · 2	perl-Crypt-PasswdMD5	0:1.3-17.amzn2.0.1

Vulnerabilities 1

High 7.5

CVE-2026-6659

Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts

Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function is predictable, and unsuitable for cryptography.

RSAVAGE Crypt::PasswdMD5 perl-Crypt-PasswdMD5 libcrypt-passwdmd5-perl Debian Ubuntu Azure Linux

May 8, 2026

References

web
https://alas.aws.amazon.com/cve/html/CVE-2026-6659.html