Bug#1101746: bookworm-pu: package libdata-entropy-perl/0.007-4+deb12u1
Control: tags -1 - moreinfo
Hi,
On Mon, Mar 31, 2025 at 03:30:52PM +0300, Adrian Bunk wrote:
> Package: release.debian.org
> Severity: normal
> Tags: bookworm moreinfo
> User: release.debian.org@packages.debian.org
> Usertags: pu
> X-Debbugs-Cc: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>, security@debian.org
>
> * CVE-2025-1860: rand() function was used as default source of entropy
>
> Tagged moreinfo, as question to the security team whether they want
> this in -pu or as DSA.
A fix via an upcoming point release is fine for this. Moritz has
marked it today as no-dsa for bookworm.
Regards,
Salvatore
Reply to: