Debian/libcrypt-passwdmd5-perl: high 7.5
Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function is predictable, and unsuitable for cryptography.
Action: Upgrade libcrypt-passwdmd5-perl to 1.44-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.44-1 | - |
Fixed versions
| 1.44-1 |
Sources
- osv: DEBIAN-CVE-2026-6659#Debian:14/libcrypt-passwdmd5-perl
- https://security-tracker.debian.org/tracker/CVE-2026-6659
published · modified · JSON