Crypt-OpenSSL-RSA-0.25

Security Advisories (1)

CVE-2024-2467 (2024-04-25)

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The vulnerability affects the legacy PKCS#1v1.5 RSA encryption padding mode.

https://access.redhat.com/security/cve/CVE-2024-2467
https://bugzilla.redhat.com/show_bug.cgi?id=2269567
https://github.com/toddr/Crypt-OpenSSL-RSA/issues/42
https://people.redhat.com/~hkario/marvin/

Changes for version 0.25

Add a LICENSE file.
Fix a bug (reported by many) in rsa.t - we were incorrectly counting the number of tests in situations where use_sha512_hash was not available.

Modules

Crypt::OpenSSL::RSA

RSA encoding and decoding, using the openSSL libraries

Other files

Changes
LICENSE
MANIFEST
META.yml
Makefile.PL
README

To install Crypt::OpenSSL::RSA, copy and paste the appropriate command in to your terminal.

cpanm

cpanm Crypt::OpenSSL::RSA

CPAN shell

perl -MCPAN -e shell
install Crypt::OpenSSL::RSA

For more information on module installation, please visit the detailed CPAN module installation guide.

	Global
`s`	Focus search bar
`?`	Bring up this help dialog

	GitHub
`g` `p`	Go to pull requests
`g` `i`	Go to GitHub issues (only if GitHub is preferred repository)

	POD
`g` `a`	Go to author
`g` `c`	Go to changes
`g` `i`	Go to issues
`g` `d`	Go to dist
`g` `r`	Go to repository/SCM
`g` `s`	Go to source
`g` `b`	Go to file browse

	Search terms
module: (e.g. module:Plugin)
distribution: (e.g. distribution:Dancer auth)
author: (e.g. author:SONGMU Redis)
version: (e.g. version:1.00)

Changes for version 0.25

Modules

Other files

Module Install Instructions