High · 7.5 CVE-2018-25107 EUVD-2018-21596GHSA-r3m8-7h2r-2mp6

The Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand() function, which is not a secure source of rand…

Published Dec 29, 2024 · Updated Dec 31, 2024 · Assigned by mitre

Package: libcrypt-random-source-perl Package: libcrypt-random-source-perl Ecosystem: Debian Ecosystem: Ubuntu

Description

The Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand() function, which is not a secure source of random bits.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	libcrypt-random-source-perl	0.14-1	—
Debian 13	libcrypt-random-source-perl	0.14-1	—
Debian 12	libcrypt-random-source-perl	0.14-1	—

Ubuntu