Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 41: perl-Crypt-URandom-Token 2025-0a8c805972: secure password gen

fedora
Calendar Grey April 15, 2025
Dist Fedora Esm H88
The latest release of perl-Crypt-URandom-Token enhances the security features related to password creation in Fedora 41.
Needed for perl-DBIx-Class-EncodedColumn-0.11

Summary

This module provides a secure way to generate a random token for passwords

and similar using Crypt::URandom as the source of random bits.

Update Information:

Needed for perl-DBIx-Class-EncodedColumn-0.11

Topics%20covered

Topics Covered

security advisory data protection software update Fedora password strength Crypt-URandom-Token

Change Log

* Fri Mar 28 2025 Jitka Plesnikova 0.003-1 - Specfile autogenerated by cpanspec 1.78. - Package tests

References


[ 1 ] Bug #2355243 - CVE-2025-27551 perl-DBIx-Class-EncodedColumn: DBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Digest.pm [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2355243 [ 2 ] Bug #2355245 - CVE-2025-27552 perl-DBIx-Class-EncodedColumn: DBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Crypt/Eksblowfish/Bcrypt.pm [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2355245

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-0a8c805972' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: perl-Crypt-URandom-Token
Product: Fedora 41
Version: 0.003
Release: 1.fc41
URL: https://metacpan.org/dist/Crypt-URandom-Token
Summary: Generate secure strings for passwords, secrets and similar

Topics%20covered

Topics Covered

security advisory data protection software update Fedora password strength Crypt-URandom-Token

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here