libnet-dropbox-api-perl - Debian Package Tracker

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2024-58036: Net::Dropbox::API 1.9 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.

Created: 2025-04-05 Last update: 2025-04-20 03:00

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2024-58036: Net::Dropbox::API 1.9 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.

Created: 2025-04-05 Last update: 2025-04-20 03:00

Standards version of the package is outdated. high

The package is severely out of date with respect to the Debian Policy. The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.2 instead of 3.9.4).

Created: 2018-04-16 Last update: 2025-02-27 13:25

lintian reports 2 warnings normal

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2021-01-27 Last update: 2022-07-30 12:14

1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:

CVE-2024-58036: (needs triaging) Net::Dropbox::API 1.9 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.

You can find information about how to handle this issue in the security team's documentation.

Created: 2025-04-05 Last update: 2025-04-20 03:00