[Git][security-tracker-team/security-tracker][master] Triage CVE-2026-41564 in libcryptx-perl for bullseye LTS.
Chris Lamb (@lamby)
lamby at debian.org
Thu Apr 30 12:59:29 BST 2026
Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits:
50bd4476 by Chris Lamb at 2026-04-30T04:59:06-07:00
Triage CVE-2026-41564 in libcryptx-perl for bullseye LTS.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3090,6 +3090,7 @@ CVE-2026-41564 (CryptX versions before 0.088 for Perl do not reseed the Crypt::P
- libcryptx-perl 0.087-2
[trixie] - libcryptx-perl <no-dsa> (Minor issue)
[bookworm] - libcryptx-perl <no-dsa> (Minor issue)
+ [bullseye] - libcryptx-perl <postponed> (Minor issue; can be fixed in next update)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/39209500/
NOTE: https://github.com/DCIT/perl-CryptX/security/advisories/GHSA-24c2-gp6c-24c6
NOTE: Fixed by: https://github.com/DCIT/perl-CryptX/commit/9a1dd3e0c27d68e32450be5538b864c2b115ee15 (v0.088)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50bd4476be5138634f48f0b2920afef040eba7be
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50bd4476be5138634f48f0b2920afef040eba7be
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260430/db8accb6/attachment.htm>
More information about the debian-security-tracker-commits
mailing list