Fedora 43 : perl-Data-Entropy (2026-8924ee53fe)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8924ee53fe advisory. Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue CVE-2026-18536. Tenable has extracted...

DEBIAN-CVE-2026-18536

Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. The Data::Entropy::RawSource::RandomOrg and Data::Entropy::RawSource::RandomnumbersInfo remote sources are accessed over plain HTTP. The Data::Entropy::RawSource::RandomOrg integrity check trivially matches...

CVE-2026-18536

Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. The Data::Entropy::RawSource::RandomOrg and Data::Entropy::RawSource::RandomnumbersInfo remote sources are accessed over plain HTTP. The Data::Entropy::RawSource::RandomOrg integrity check trivially matches...

CVE-2026-18536

The Data::Entropy Perl module (versions before 0.010 ) is vulnerable to an interception attack because it retrieves remote entropy sources via plain HTTP . Specifically, the Data::Entropy::RawSource::RandomOrg and Data::Entropy::RawSource::RandomnumbersInfo sources are accessed without encryption...