Nixpkgs security tracker

Permalink CVE-2013-4441

created 2 months ago Activity log

Created suggestion 2 months ago

The Phonemes mode in Pwgen 2.06 generates predictable passwords, which …

The Phonemes mode in Pwgen 2.06 generates predictable passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack.

References

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726578 x_transferredx_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/06/06/1 x_transferredx_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/10/16/15 x_transferredx_refsource_MISC
https://www.openwall.com/lists/oss-security/2012/01/22/6 x_transferredx_refsource_MISC

Affected products

Pwgen

==2.06

Matching in nixpkgs

pkgs.pwgen

Password generator which creates passwords which can be easily memorized by a human

nixos-unstable 2.08
- nixpkgs-unstable 2.08
- nixos-unstable-small 2.08
nixos-25.11 2.08
- nixos-25.11-small 2.08
- nixpkgs-25.11-darwin 2.08

pkgs.pwgen-secure

Secure password generation library to replace pwgen

nixos-unstable 0.9.1
- nixpkgs-unstable 0.9.1
- nixos-unstable-small 0.9.1
nixos-25.11 0.9.1
- nixos-25.11-small 0.9.1
- nixpkgs-25.11-darwin 0.9.1

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>
@peterhoeg Peter Hoeg <peter@hoeg.com>