https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:17:32 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-15259 bdu:2026-15259 https://cve.radiocsirt.org/vuln/bdu:2026-15259 https://cve.radiocsirt.org/vuln/euvd-2026-333293 EUVD-2026-333293 https://cve.radiocsirt.org/vuln/euvd-2026-333293 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14570 <p>Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery.</p> <p>&#34;Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce and the private key are drawn from makerandom. Because the high bit is always set, the result is not uniform: its top bit is fixed, producing insecure values.&#34;</p> <p>An attacker who collects a modest number of signatures under an affected key, together with the public key, can recover the private key with a lattice attack.</p> <p>Keys used to sign with an affected version should be considered compromised and new keys should be generated.</p> <p>Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery.</p> <p>&#34;Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce and the private key are drawn from makerandom. Because the high bit is always set, the result is not uniform: its top bit is fixed, producing insecure values.&#34;</p> <p>An attacker who collects a modest number of signatures under an affected key, together with the public key, can recover the private key with a lattice attack.</p> <p>Keys used to sign with an affected version should be considered compromised and new keys should be generated.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-14570 https://cve.radiocsirt.org/vuln/ghsa-v6rc-95xw-8xp5 <p>Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery.</p> <p>&#34;Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce and the private key are drawn from makerandom. Because the high bit is always set, the result is not uniform: its top bit is fixed, producing insecure values.&#34;</p> <p>An attacker who collects a modest number of signatures under an affected key, together with the public key, can recover the private key with a lattice attack.</p> <p>Keys used to sign with an affected version should be considered compromised and new keys should be generated.</p> <p>Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery.</p> <p>&#34;Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce and the private key are drawn from makerandom. Because the high bit is always set, the result is not uniform: its top bit is fixed, producing insecure values.&#34;</p> <p>An attacker who collects a modest number of signatures under an affected key, together with the public key, can recover the private key with a lattice attack.</p> <p>Keys used to sign with an affected version should be considered compromised and new keys should be generated.</p> https://cve.radiocsirt.org/vuln/ghsa-v6rc-95xw-8xp5 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-14570 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libcrypt-dsa-perl, Ubuntu:18.04:LTS: libcrypt-dsa-perl, Ubuntu:20.04:LTS: libcrypt-dsa-perl, Ubuntu:22.04:LTS: libcrypt-dsa-perl, Ubuntu:24.04:LTS: libcrypt-dsa-perl, Ubuntu:25.10: libcrypt-dsa-perl, Ubuntu:26.04:LTS: libcrypt-dsa-perl</p> <p>Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. &#34;Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce and the private key are drawn from makerandom. Because the high bit is always set, the result is not uniform: its top bit is fixed, producing insecure values.&#34; An attacker who collects a modest number of signatures under an affected key, together with the public key, can recover the private key with a lattice attack. Keys used to sign with an affected version should be considered compromised and new keys should be generated.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libcrypt-dsa-perl, Ubuntu:18.04:LTS: libcrypt-dsa-perl, Ubuntu:20.04:LTS: libcrypt-dsa-perl, Ubuntu:22.04:LTS: libcrypt-dsa-perl, Ubuntu:24.04:LTS: libcrypt-dsa-perl, Ubuntu:25.10: libcrypt-dsa-perl, Ubuntu:26.04:LTS: libcrypt-dsa-perl</p> <p>Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. &#34;Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce and the private key are drawn from makerandom. Because the high bit is always set, the result is not uniform: its top bit is fixed, producing insecure values.&#34; An attacker who collects a modest number of signatures under an affected key, together with the public key, can recover the private key with a lattice attack. Keys used to sign with an affected version should be considered compromised and new keys should be generated.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-14570