Security Advisories (1)
CVE-2002-20002 (2025-01-02)

The Net::EasyTCP package before 0.15 for Perl always uses Perl's builtin rand(), which is not a strong random number generator, for cryptographic keys.

Changes for version 0.05

  • Fixed a bug where calling the receive() method may have failed if a signal (such as child dying) was delivered to the process at the same time. The bug became apparent on heavily-stormed servers with many forked() children dying, causing the negotiation with new clients to sometimes fail.
  • Re-wrote the server-side negotiating code to prevent it from blocking for couple of seconds during negotiating with a newly connected client.

Modules

Easily create TCP/IP clients and servers