Unrated
The Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand() function, which is not a secure source of random bits.
CVE-2018-25107
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2018-25107 libcrypt-random-source-perl Fixed in: 0.14-1
References
- patch github.com
- web metacpan.org