CVE and update status of the FreeBSD ports tree3,298 unaddressed CVEs in 671 portsAll times are CET
CVE details

CVE-2026-11625

Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes. When an object is initialised before forking, or when the functional interface is used, then the internal state for the PRNG is shared across processes and identical random streams will be produced. Secrets generated in multiprocess applications are predictable across processes.

Score
7.5 high
Published
2026-06-26
Links
NVD · cve.org · Report wrong data

Matched ports (1)

PortPackageVersionStatusMaintainer
security/p5-Bytes-Random-Securep5-Bytes-Random-Secure0.29unaddressedsunpoet@FreeBSD.org

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>p5-Bytes-Random-Secure</name>
	<range><lt>FIXME</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>Bytes::Random::Secure versions through 0.29 for Perl share internal
	state across forked processes.

When an object is initialised before
	forking, or when the functional interface is used, then the internal
	state for the PRNG is shared across processes and identical random
	streams will be produced.

Secrets generated in multiprocess
	applications are predictable across processes.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2026-11625</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2026-11625</url>
    </references>
    <dates>
      <discovery>2026-06-26</discovery>
      <entry>2026-10-27</entry>
    </dates>
  </vuln>