Поиск уязвимостей
Количество 14
Количество 14
BDU:2026-15254
Уязвимость пакета цифровой подписи DSA языка Perl perl-Crypt-DSA, связанная с атакуемой поверхностью, чье количественное измерение превышает желаемый максимум, позволяющая нарушителю оказать воздействие на конфиденциальность защищаемой информации
ALT-PU-2026-18275
ALT-PU-2026-18275: package `perl-Crypt-DSA` update to version 1.24-alt1
CVE-2026-12205
Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised.
CVE-2026-12205
Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised.
CVE-2026-12205
Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised.
CVE-2026-12205
Crypt::DSA versions before 1.21 for Perl reused the nonce across signa ...
ROS-20260908-80-0048
Уязвимость perl-Convert-ASN1
ROS-20260908-80-0047
Уязвимость perl-Crypt-OpenSSL-AES
ROS-20260908-80-0046
Уязвимость perl-Convert-PEM
ROS-20260908-80-0045
Уязвимость perl-Crypt-DSA
ROS-20260908-73-0041
Уязвимость perl-Convert-PEM
ROS-20260908-73-0040
Уязвимость perl-Convert-ASN1
ROS-20260908-73-0039
Уязвимость perl-Crypt-DSA
GHSA-88g7-87jg-w4q9
Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-15254 Уязвимость пакета цифровой подписи DSA языка Perl perl-Crypt-DSA, связанная с атакуемой поверхностью, чье количественное измерение превышает желаемый максимум, позволяющая нарушителю оказать воздействие на конфиденциальность защищаемой информации | CVSS3: 9.1 | 0% Низкий | 5 месяцев назад |
| ALT-PU-2026-18275 ALT-PU-2026-18275: package `perl-Crypt-DSA` update to version 1.24-alt1 | CVSS3: 9.1 | 25 дней назад | |
 | CVE-2026-12205 Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised. | CVSS3: 9.1 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-12205 Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised. | CVSS3: 7.1 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-12205 Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised. | CVSS3: 9.1 | 0% Низкий | 5 месяцев назад |
| CVE-2026-12205 Crypt::DSA versions before 1.21 for Perl reused the nonce across signa ... | CVSS3: 9.1 | 0% Низкий | 5 месяцев назад |
 | ROS-20260908-80-0048 Уязвимость perl-Convert-ASN1 | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
| ROS-20260908-80-0047 Уязвимость perl-Crypt-OpenSSL-AES | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
| ROS-20260908-80-0046 Уязвимость perl-Convert-PEM | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
| ROS-20260908-80-0045 Уязвимость perl-Crypt-DSA | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
| ROS-20260908-73-0041 Уязвимость perl-Convert-PEM | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
| ROS-20260908-73-0040 Уязвимость perl-Convert-ASN1 | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
| ROS-20260908-73-0039 Уязвимость perl-Crypt-DSA | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
| GHSA-88g7-87jg-w4q9 Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised. | CVSS3: 9.1 | 0% Низкий | 5 месяцев назад |
Уязвимостей на страницу