Bug#1104648: Fixed upstream

[Sean Whitton]

Hello,

On Mon 19 May 2025 at 07:03pm +02, Salvatore Bonaccorso wrote:

> Control: tags 1104648 - fixed-upstream
>
> On Mon, May 19, 2025 at 11:50:26AM +0100, Sean Whitton wrote:
>> tag 1104648 + fixed-upstream
>> tag 1104633 + fixed-upstream
>> thanks
>>
>> Hello,
>>
>> These are now fixed by upstream commit c82071556c569a251152892c8cc2fd0ad5a4be54.
>
> CVE-2024-58134 covers the default static/guessable secret, and this
> behavior is unchanged by the optional CryptX.
>
> Thanks to Stig for noticing.

Looking again, I see what you mean.  Thanks.

-- 
Sean Whitton
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 869 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20250520/b170d21e/attachment.sig>