tocsin

Debian/libcrypt-saltedhash-perl: critical 9.1

Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

Action: Upgrade libcrypt-saltedhash-perl to 0.11-1 or later.

Affected

introducedfixedlast affected
00.11-1-

Fixed versions

0.11-1

Sources

published · modified · JSON