Stay Secure with the Latest Linux Advisories

security advisorymoderatecryptographic weakness

Mageia 9 MGASA-2025-0062 moderate: perl-Net-OAuth nonce issue

In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is not cryptographically strong. (CVE-2025-22376) References: . MGASA-2025-0062 - Updated perl-Net-OAuth, perl-Crypt-URandom & perl-Module-Build packages fix security vulnerability Publication date: 13 Feb 2025 URL: https://advisories.mageia.org/MGASA-2025-0062.html Type: security Affected Mageia releases: 9 CVE: CVE-2025-22376 In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is not cryptographically strong. (CVE-2025-22376) References: - https://bugs.mageia.org/show_bug.cgi?id=33923 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/GLAEBHWU2NBVEDHXVVKYY4Y2XLNJX2VX/ - https://www.cve.org/CVERecord?id=CVE-2025-22376 SRPMS: - 9/core/perl-Net-OAuth-0.300.0-1.mga9 - 9/core/perl-Crypt-URandom-0.370.0-1.mga9 - 9/core/perl-Module-Build-0.423.400-1.mga9 . Mageia 2025-0063 updates address vulnerabilities in python-requests, python-urllib3, and python-setuptools packages.. perl security, nonce generation, Mageia updates, cryptographic flaws, package security. . LinuxSecurity.com Team

Feb 13, 2025 Mageia