https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T22:40:34.104556+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-47372 CVE-2026-47372 — Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts 2026-10-03T22:40:35.120487+00:00

Affected: RRWO Crypt::SaltedHash

Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts.

These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

 https://vulnerability.circl.lu/vuln/usn-8418-1 USN-8418-1 — libcrypt-saltedhash-perl vulnerability 2026-10-03T22:40:35.120757+00:00

Affected: Ubuntu:Pro:16.04:LTS: libcrypt-saltedhash-perl, Ubuntu:Pro:18.04:LTS: libcrypt-saltedhash-perl, Ubuntu:Pro:20.04:LTS: libcrypt-saltedhash-perl, Ubuntu:Pro:22.04:LTS: libcrypt-saltedhash-perl, Ubuntu:Pro:24.04:LTS: libcrypt-saltedhash-perl, Ubuntu:25.10: libcrypt-saltedhash-perl, Ubuntu:Pro:26.04:LTS: libcrypt-saltedhash-perl

It was discovered that Crypt-SaltedHash incorrectly generated salts using a cryptographically weak pseudo-random number generator. An attacker could possibly use this issue to predict generated salts, leading to a weakening of cryptographic protections.