Поиск уязвимостей
Количество 14
Количество 14
CVE-2026-12205
Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised.
CVE-2026-12205
Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised.
CVE-2026-12205
Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised.
CVE-2026-12205
Crypt::DSA versions before 1.21 for Perl reused the nonce across signa ...
ROS-20260908-80-0048
Уязвимость perl-Convert-ASN1
ROS-20260908-80-0047
Уязвимость perl-Crypt-OpenSSL-AES
ROS-20260908-80-0046
Уязвимость perl-Convert-PEM
ROS-20260908-80-0045
Уязвимость perl-Crypt-DSA
ROS-20260908-73-0041
Уязвимость perl-Convert-PEM
ROS-20260908-73-0040
Уязвимость perl-Convert-ASN1
ROS-20260908-73-0039
Уязвимость perl-Crypt-DSA
GHSA-88g7-87jg-w4q9
Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised.
BDU:2026-15254
Уязвимость пакета цифровой подписи DSA языка Perl perl-Crypt-DSA, связанная с атакуемой поверхностью, чье количественное измерение превышает желаемый максимум, позволяющая нарушителю оказать воздействие на конфиденциальность защищаемой информации
ALT-PU-2026-18275
ALT-PU-2026-18275: package `perl-Crypt-DSA` update to version 1.24-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-12205 Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised. | CVSS3: 9.1 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-12205 Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised. | CVSS3: 7.1 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-12205 Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised. | CVSS3: 9.1 | 0% Низкий | 5 месяцев назад |
| CVE-2026-12205 Crypt::DSA versions before 1.21 for Perl reused the nonce across signa ... | CVSS3: 9.1 | 0% Низкий | 5 месяцев назад |
 | ROS-20260908-80-0048 Уязвимость perl-Convert-ASN1 | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
| ROS-20260908-80-0047 Уязвимость perl-Crypt-OpenSSL-AES | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
| ROS-20260908-80-0046 Уязвимость perl-Convert-PEM | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
| ROS-20260908-80-0045 Уязвимость perl-Crypt-DSA | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
| ROS-20260908-73-0041 Уязвимость perl-Convert-PEM | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
| ROS-20260908-73-0040 Уязвимость perl-Convert-ASN1 | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
| ROS-20260908-73-0039 Уязвимость perl-Crypt-DSA | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
| GHSA-88g7-87jg-w4q9 Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised. | CVSS3: 9.1 | 0% Низкий | 5 месяцев назад |
 | BDU:2026-15254 Уязвимость пакета цифровой подписи DSA языка Perl perl-Crypt-DSA, связанная с атакуемой поверхностью, чье количественное измерение превышает желаемый максимум, позволяющая нарушителю оказать воздействие на конфиденциальность защищаемой информации | CVSS3: 9.1 | 0% Низкий | 5 месяцев назад |
| ALT-PU-2026-18275 ALT-PU-2026-18275: package `perl-Crypt-DSA` update to version 1.24-alt1 | CVSS3: 9.1 | 25 дней назад |
Уязвимостей на страницу