Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

Fedora 42 perl-Authen-SASL Critical CVE-2025-40918 Randomness Alert

fedora
Calendar Grey August 14, 2025
Scroller Fedora
Fedora 42 perl-Authen-SASL upgrade addresses CVE-2025-40918's vulnerability regarding insecure randomness and enhances protocol security.
2.1900 [Fixed] - CVE-2025-40918 (Insecure source of randomness), required addition of dependency on Crypt::URandom [Changed] - Modules Authen::SASL::Perl::CRAM_MD5, Authen::SASL::P...

Summary

SASL is a generic mechanism for authentication used by several network

protocols. Authen::SASL provides an implementation framework that all

protocols should be able to share.

Update Information:

2.1900 [Fixed] - CVE-2025-40918 (Insecure source of randomness), required addition of dependency on Crypt::URandom [Changed] - Modules Authen::SASL::Perl::CRAM_MD5, Authen::SASL::Perl::DIGEST_MD5 and Authen::SASL::CRAM_MD5 marked as deprecated based on the respective RFC documents; - Update module metadata to point to the new 'perl-authen-sasl' org on GitHub to which the modules moved - Use VERSION declarations in 'package' statements, since our minimum Perl version is 5.14 anyway

Topics%20covered

Topics Covered

security advisory fedora update important insecure randomness perl-authen-sasl

Change Log

* Tue Aug 5 2025 Jitka Plesnikova - 2.1900-1 - 2.1900 bump - Fixed CVE-2025-40918 (rhbz#2381432)

References


[ 1 ] Bug #2381432 - CVE-2025-40918 perl-Authen-SASL: Authen::SASL::Perl::DIGEST_MD5 insecure cnonce generation [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2381432

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-fddaaaf9f0' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: perl-Authen-SASL
Product: Fedora 42
Version: 2.1900
Release: 1.fc42
URL: https://metacpan.org/release/Authen-SASL
Summary: SASL Authentication framework for Perl

Topics%20covered

Topics Covered

security advisory fedora update important insecure randomness perl-authen-sasl

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.