CVE-2025-27552
Publication date 26 March 2025
Last updated 2 April 2025
Ubuntu priority
DBIx::Class::EncodedColumn use the rand() function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files Crypt/Eksblowfish/Bcrypt.pm. This issue affects DBIx::Class::EncodedColumn until 0.00032.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| libdbix-class-encodedcolumn-perl | 24.10 oracular |
Needs evaluation
|
| 24.04 LTS noble |
Needs evaluation
|
|
| 22.04 LTS jammy |
Needs evaluation
|
|
| 20.04 LTS focal |
Needs evaluation
|
|
| 18.04 LTS bionic |
Needs evaluation
|
|
| 16.04 LTS xenial |
Needs evaluation
|
References
Other references
- https://www.cve.org/CVERecord?id=CVE-2025-27552
- https://github.com/wreis/DBIx-Class-EncodedColumn/commit/5e9e51f574f7e64e8c014e9e4f00ee8fd87a5335 (0.11)
- https://metacpan.org/release/WREIS/DBIx-Class-EncodedColumn-0.00032/changes
- https://security.metacpan.org/docs/guides/random-data-for-security.html