Most recent entries from all

bdu:2026-15254

2026-10-04T19:36:59.829217+00:00

bdu:2026-15254

EUVD-2026-327718

2026-10-04T19:36:59.829255+00:00

EUVD-2026-327718

fkie_cve-2026-12205

2026-10-04T19:36:59.829270+00:00

Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery.

Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it.

The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r".

Keys used to sign more than once with an affected version should be considered compromised.

GHSA-88g7-87jg-w4q9

2026-10-04T19:36:59.829304+00:00

Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery.

Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it.

The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r".

Keys used to sign more than once with an affected version should be considered compromised.

UBUNTU-CVE-2026-12205

2026-10-04T19:36:59.829323+00:00

Affected: Ubuntu:16.04:LTS: libcrypt-dsa-perl, Ubuntu:18.04:LTS: libcrypt-dsa-perl, Ubuntu:20.04:LTS: libcrypt-dsa-perl, Ubuntu:22.04:LTS: libcrypt-dsa-perl, Ubuntu:24.04:LTS: libcrypt-dsa-perl, Ubuntu:25.10: libcrypt-dsa-perl, Ubuntu:26.04:LTS: libcrypt-dsa-perl

Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised.