[Slackbuilds-users] Fwd: perl-Crypt-CBC SlackBuild is vulnerable to CVE-2025-2814

[pyllyukko]

Hello, list.

FYI. Tried reaching the maintainer, but haven't gotten any response.

----- Forwarded message from pyllyukko <pyllyukko at maimed.org> -----

Date: Sun, 26 Apr 2026 13:42:35 +0300
From: pyllyukko <pyllyukko at maimed.org>
To: kris240376 at gmail.com
Subject: perl-Crypt-CBC SlackBuild is vulnerable to CVE-2025-2814

Hello.

Just wanted to let you know that your SlackBuild for Crypt::CBC is
vulnerable to CVE-2025-2814. See [1].

I tried to update it, but it turned out it packs a whole bunch of new
dependencies that are not available in SBo.

Could you take a look?

Thanks.

1: https://lists.security.metacpan.org/cve-announce/msg/28699380/

-- 
pyllyukko
email:   <pyllyukko at maimed.org>
PGP:     https://keybase.io/pyllyukko



----- End forwarded message -----

-- 
pyllyukko
email:   <pyllyukko at maimed.org>
PGP:     https://keybase.io/pyllyukko
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.slackbuilds.org/pipermail/slackbuilds-users/attachments/20260717/3a954500/attachment.asc>