{"id":"MGASA-2026-0176","summary":"Updated perl-DBIx-Class-EncodedColumn and new perl-Crypt-URandom-Token packages fix security vulnerabilities","details":"The updated perl-DBIx-Class-EncodedColumn and new\nperl-Crypt-URandom-Token packages fix security issues:\nDBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand()\nfunction for salting password hashes in Digest.pm (CVE-2025-27551)\nDBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand()\nfunction for salting password hashes in Crypt/Eksblowfish/Bcrypt.pm\n(CVE-2025-27552)\n","modified":"2026-06-06T05:45:04.509259788Z","published":"2026-06-06T05:36:58Z","upstream":["CVE-2025-27551","CVE-2025-27552"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2026-0176.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=34215"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PZO6ZQ5X5UGT2U2IHHPDXAJUDE27HTUX/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CTXKJZJLOFULT3WQ46ITSLDFTLG4YKJ2/"}],"affected":[{"package":{"name":"perl-DBIx-Class-EncodedColumn","ecosystem":"Mageia:9","purl":"pkg:rpm/mageia/perl-DBIx-Class-EncodedColumn?arch=source&distro=mageia-9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.110.0-1.mga9"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0176.json"}},{"package":{"name":"perl-Crypt-URandom-Token","ecosystem":"Mageia:9","purl":"pkg:rpm/mageia/perl-Crypt-URandom-Token?arch=source&distro=mageia-9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.005-1.mga9"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0176.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}