tocsin

Debian/pwgen: unknown

Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which makes it easier for context-dependent attackers to guess the numbers.

Action: Upgrade pwgen to 2.07-1 or later.

Affected

introducedfixedlast affected
02.07-1-

Fixed versions

2.07-1

Sources

published · modified · JSON