SUSE alert openSUSE-SU-2026:21137-1 (perl-crypt-passwdmd5)

From:
             
 
null@suse.de
To:
             
 
security-announce@lists.opensuse.org
Subject:
             
 
openSUSE-SU-2026:21137-1: important: Security update for perl-Crypt-PasswdMD5
Date:
             
 
Tue, 30 Jun 2026 09:48:33 +0200
Message-ID:
             
 
<20260630074833.DEE50FF7F@maintenance.suse.de>
Archive-link:
             
 
Article
openSUSE security update: security update for perl-crypt-passwdmd5
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21137-1
Rating: important
References:

  * bsc#1264705



Cross-References:

  * CVE-2026-6659



Affected Products:

         openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves one vulnerability and has one bug fix can now be installed.

Description:

This update for perl-Crypt-PasswdMD5 fixes the following issues:

Changes in perl-Crypt-PasswdMD5:

- updated to 1.430.0 (1.43)
   see /usr/share/doc/packages/perl-Crypt-PasswdMD5/Changelog.ini

  [V 1.43]
  Date=2026-05-23T08:14:00
  Deploy.Action=Upgrade
  Deploy.Reason=Security
  Comments= <<EOT
  - Accept pull request from Paul Howarth to replace use of the cryptographically
  weak rand() function with the much stronger Crypt::URandom::urandom().
  With thanx. CVE-2026-6659 bsc#1264705
  - Add Encode, Exporter, ExtUtils::MakeMaker to Makefile.PL.
  - Add files AI_POLICY.md & SECURITY.md.
  - Delete file LICENSE.
  - Add file LICENSE-GPL-3 with the latest version from https://fsf.org/.
  EOT


Patch instructions:

   To install this openSUSE security update use the suse recommended installation methods
   like YaST online_update or "zypper patch".
   Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

   zypper in -t patch openSUSE-Leap-16.0-packagehub-332=1

Package List:

- openSUSE Leap 16.0:

  perl-Crypt-PasswdMD5-1.430.0-bp160.1.1

References:

  * https://www.suse.com/security/cve/CVE-2026-6659.html