SUSE-SU-2026:1954-1

HIGH7.5

Security update for perl-Crypt-URandom

Published May 18, 2026

Modified 2 weeks ago

Fix available

Details

Description of the patch:

This update for perl-Crypt-URandom fixes the following issue:

CVE-2026-2474: negative length parameter in the XS function can lead to a heap-based buffer overflow (bsc#1258266).

Changes for perl-Crypt-URandom:

updated to 0.550.0 (0.55)
Fix for sysread/read failures. Thanks to Miha Purg for GH#20
Fix for test suite failures on STDOUT encoding. Thanks to Lukas Mai for GH#19

Affected Packages

perl-Crypt-URandom

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Module for Development Tools 15 SP7

Fixed in:

0.550.0-150000.1.6.1

References

ADVISORY

https://bugzilla.suse.com/1258266

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2026-May/046529.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-2474/

WEB

https://www.suse.com/support/security/rating/

ADVISORY