Subject: pkg/33170: Update needed for p5-Crypt-CBC-2.08nb2 in 2005Q4
To: None <pkg-manager@netbsd.org, gnats-admin@netbsd.org,>
From: None <raczkow@prz.edu.pl>
List: pkgsrc-bugs
Date: 03/30/2006 07:10:00
>Number: 33170
>Category: pkg
>Synopsis: Update needed for p5-Crypt-CBC-2.08nb2 in 2005Q4
>Confidential: no
>Severity: serious
>Priority: high
>Responsible: pkg-manager
>State: open
>Class: support
>Submitter-Id: net
>Arrival-Date: Thu Mar 30 07:10:00 +0000 2006
>Originator: Krzysztof Raczkowski
>Release: pkgsrc 2005Q4 on Solaris 10
>Organization:
Rzeszow University of Technology
>Environment:
SunOS pkgsrc-i32 5.10 Generic_Patch_118844-30 i86pc i386 i86pc
>Description:
p5-Crypt-CBC in 2005Q4 branch needs update due to:
===> Checking for vulnerabilities in p5-Crypt-CBC-2.08nb2
*** WARNING - 1778,weak-encryption vulnerability in p5-Crypt-CBC-2.08nb2 - see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0898 for more information ***
or define ALLOW_VULNERABLE_PACKAGES if this package is absolutely essential
*** Error code 255
>How-To-Repeat:
>Fix: