Subject: pkg/33170: Update needed for p5-Crypt-CBC-2.08nb2 in 2005Q4
To: None <pkg-manager@netbsd.org, gnats-admin@netbsd.org,>
From: None <raczkow@prz.edu.pl>
List: pkgsrc-bugs
Date: 03/30/2006 07:10:00
>Number:         33170
>Category:       pkg
>Synopsis:       Update needed for p5-Crypt-CBC-2.08nb2 in 2005Q4
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          support
>Submitter-Id:   net
>Arrival-Date:   Thu Mar 30 07:10:00 +0000 2006
>Originator:     Krzysztof Raczkowski
>Release:        pkgsrc 2005Q4 on Solaris 10
>Organization:
Rzeszow University of Technology
>Environment:
SunOS pkgsrc-i32 5.10 Generic_Patch_118844-30 i86pc i386 i86pc
>Description:
p5-Crypt-CBC in 2005Q4 branch needs update due to:

===> Checking for vulnerabilities in p5-Crypt-CBC-2.08nb2
*** WARNING - 1778,weak-encryption vulnerability in p5-Crypt-CBC-2.08nb2 - see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0898 for more information ***
or define ALLOW_VULNERABLE_PACKAGES if this package is absolutely essential
*** Error code 255

>How-To-Repeat:

>Fix: