ELBA-2026-66068

ELBA-2026-66068 - perl-Crypt-PasswdMD5 Bug Fix update

Type:	BUG
Impact:	NA
Release Date:	2026-06-01

Description

[1.4.3-1]
- Update to 1.43
- Replace use of the cryptographically weak rand() function with the much
stronger Crypt::URandom::urandom() (GH#3, CVE-2026-6659, rhbz#2479575)
- Add Encode, Exporter, ExtUtils::MakeMaker to Makefile.PL
- Add files AI_POLICY.md and SECURITY.md

[1.4.2-4]
- Update license to SPDX format

[1.4.2-1]
- Update to 1.42
- Handle the case where the password has the utf8 bit set (GH#1)
- Update t/basic.t to use Encode and to test the utf8 bit setting
- Very slightly reformat the source code of PasswdMD5.pm and basic.t

[1.4.1-1]
- Update to 1.41
- Adopt new repo structure - see:
http://savage.net.au/Ron/html/My.Workflow.for.Building.Distros.html
- Reformat Makefile.PL
- Add t/00.*
- Update POD to change RT to GitHub
- Package new LICENSE file

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	perl-Crypt-PasswdMD5-1.4.3-1.el8.src.rpm	4afb49a43dd065365696fd355152134807e43da87c77563adc0303f6a4e41797	-	ol8_x86_64_developer_EPEL
	perl-Crypt-PasswdMD5-1.4.3-1.el8.noarch.rpm	aca293a12b99f48d9eaadf0517597a53d561ef64a473b6c78f0479d0615d8267	-	ol8_x86_64_developer_EPEL

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team