{"id":"openSUSE-SU-2026:21137-1","summary":"Security update for perl-Crypt-PasswdMD5","details":"This update for perl-Crypt-PasswdMD5 fixes the following issues:\n\nChanges in perl-Crypt-PasswdMD5:\n\n- updated to 1.430.0 (1.43)\n   see /usr/share/doc/packages/perl-Crypt-PasswdMD5/Changelog.ini\n\n  [V 1.43]\n  Date=2026-05-23T08:14:00\n  Deploy.Action=Upgrade\n  Deploy.Reason=Security\n  Comments= \u003c\u003cEOT\n  - Accept pull request from Paul Howarth to replace use of the cryptographically\n  weak rand() function with the much stronger Crypt::URandom::urandom().\n  With thanx. CVE-2026-6659 bsc#1264705\n  - Add Encode, Exporter, ExtUtils::MakeMaker to Makefile.PL.\n  - Add files AI_POLICY.md & SECURITY.md.\n  - Delete file LICENSE.\n  - Add file LICENSE-GPL-3 with the latest version from https://fsf.org/.\n  EOT\n","modified":"2026-06-30T18:24:44.883231198Z","published":"2026-06-18T07:51:34Z","related":["CVE-2026-6659"],"upstream":["CVE-2026-6659"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1264705"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-6659"}],"affected":[{"package":{"name":"perl-Crypt-PasswdMD5","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/perl-Crypt-PasswdMD5&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.430.0-bp160.1.1"}]}],"ecosystem_specific":{"binaries":[{"perl-Crypt-PasswdMD5":"1.430.0-bp160.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21137-1.json"}}],"schema_version":"1.7.5"}