CVE-2026-11625

Name	CVE-2026-11625
Description	Bytes::Random::Secure versions through 0.29 for Perl share internal st ...
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
libbytes-random-secure-perl (PTS)	bullseye	0.29-1	vulnerable
	forky, bookworm, trixie	0.29-3	vulnerable
	sid	0.29-4	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
libbytes-random-secure-perl	source	(unstable)	0.29-4

Notes

[trixie] - libbytes-random-secure-perl <no-dsa> (Minor issue; will be fixed via point release)
[bookworm] - libbytes-random-secure-perl <no-dsa> (Minor issue; will be fixed via point release)
https://lists.security.metacpan.org/cve-announce/msg/41305966/
https://github.com/daoswald/Bytes-Random-Secure/issues/3
https://github.com/daoswald/Bytes-Random-Secure/pull/4
https://security.metacpan.org/patches/B/Bytes-Random-Secure/0.29/CVE-2026-11625-r1.patch