gpp_maybe Security update for perl-crypt-urandom
SUSE-SLE-Module-Development-Tools-15-SP7-2026-1954


This update for perl-Crypt-URandom fixes the following issue: - CVE-2026-2474: negative length parameter in the XS function can lead to a heap-based buffer overflow (bsc#1258266). Changes for perl-Crypt-URandom: - updated to 0.550.0 (0.55) - Fix for sysread/read failures. Thanks to Miha Purg for GH#20 - Fix for test suite failures on STDOUT encoding. Thanks to Lukas Mai for GH#19

  • Release Date
    May 18 2026
  • References
    Bugzilla: 1258266
    CVEs: CVE-2026-2474
  • Type
    security
  • Severity
    important

cloud_download Downloads

Development Tools Module 15.7 s390x
  • Packages
    perl-Crypt-URandom
    Provide non blocking randomness
    0.550.0-150000.1.6.1 lock rpm lock src
Development Tools Module 15.7 ppc64le
  • Packages
    perl-Crypt-URandom
    Provide non blocking randomness
    0.550.0-150000.1.6.1 lock rpm lock src
Development Tools Module 15.7 aarch64
  • Packages
    perl-Crypt-URandom
    Provide non blocking randomness
    0.550.0-150000.1.6.1 lock rpm lock src
Development Tools Module 15.7 x86_64
  • Packages
    perl-Crypt-URandom
    Provide non blocking randomness
    0.550.0-150000.1.6.1 lock rpm lock src