ALAS2023-2026-1796 — Moderate: perl-Crypt-PasswdMD5 security update (Amazon Linux 2023)

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6659: Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function is predictable, and unsuitable for cryptography.

Fixed packages 1

Release	Package	Fixed in
Amazon Linux · 2023	perl-Crypt-PasswdMD5	0:1.4.1-1.amzn2023.0.3

Vulnerabilities 1

High 7.5

CVE-2026-6659

Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts

Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function is predictable, and unsuitable for cryptography.

RSAVAGE Crypt::PasswdMD5 perl-Crypt-PasswdMD5 libcrypt-passwdmd5-perl Debian Ubuntu Azure Linux

May 8, 2026

References

web
https://alas.aws.amazon.com/cve/html/CVE-2026-6659.html