Mandrake Linux Security Advisory : perl-Net_SSLeay (MDKSA-2006:023)

Javier Fernandez-Sanguino Pena discovered that the perl Net::SSLeay module used the file /tmp/entropy as a fallback entropy source if a proper source was not set via the environment variable EGDPATH. This could potentially lead to weakened cryptographic operations if an attacker was able to provi...

[Full-disclosure] [ MDKSA-2006:023 ] - Updated perl-Net_SSLeay packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:023 http://www.mandriva.com/security/ Package : perl-NetSSLeay Date : January 26, 2006 Affected: 10.1, 10.2, 2006.0, Corporate 3.0 Problem Description: Javier Fernandez-Sanguino Pena discovered that the perl...