Gentoo: GLSA 202305-10 Moderate: Net::HTTP Vulnerable to Redirection Attack

Gentoo Linux Security Advisory GLSA 200603-15 https://security.gentoo.org/ Severity: Low Title: Crypt::CBC: Insecure initialization vector Date: March 17, 2006 Bugs: #126048 ID: 200603-15

Synopsis ======= Crypt::CBC uses an insecure initialization vector, potentially resulting in a weaker encryption.
Background ========= Crypt::CBC is a Perl module to encrypt data using cipher block chaining (CBC).
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-perl/crypt-cbc < 2.17 >= 2.17
========== Lincoln Stein discovered that Crypt::CBC fails to handle 16 bytes long initializiation vectors correctly when running in the RandomIV mode, resulting in a weaker encr...