Nixpkgs security tracker
by @LeSuisse Activity log
- Created suggestion
- @LeSuisse accepted
- @LeSuisse published on GitHub
Crypt::DSA versions before 1.20 for Perl generate seeds using rand
Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.
References
Affected products
Crypt-DSA
- <1.20
Matching in nixpkgs
pkgs.perlPackages.CryptDSA
DSA Signatures and Key Generation
pkgs.perl5Packages.CryptDSA
DSA Signatures and Key Generation
pkgs.perl538Packages.CryptDSA
None
pkgs.perl540Packages.CryptDSA
None
Package maintainers
-
@stigtsp Stig Palmquist <stig@stig.io>