Debian/dar: unknown

The blowfish mode in DAR before 2.3.4 uses weak Blowfish-CBC cryptography by (1) discarding random bits by the blowfish::make_ivec function in libdar/crypto.cpp that results in predictable and repeati

Action: Upgrade dar to 2.3.3-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-3528#Debian:13/dar
• https://security-tracker.debian.org/tracker/CVE-2007-3528

published 2007-07-03T18:30:00Z · modified 2026-10-21T17:47:45.259579843Z · JSON