Bug 287222 - multimedia/zoneminder: Replace usage of Data::Entropy (security/p5-Data-Entropy) for undeprecate
Summary: multimedia/zoneminder: Replace usage of Data::Entropy (security/p5-Data-Entro...
Status: Open
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Some People
Assignee: Vladimir Druzenko
URL: https://cgit.freebsd.org/ports/commit...
Keywords:
Depends on:
Blocks:
 
Reported: 2025-06-01 22:03 UTC by Vladimir Druzenko
Modified: 2025-06-01 22:03 UTC (History)
1 user (show)

See Also:
bugzilla: maintainer-feedback? (bsd)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Vladimir Druzenko freebsd_committer freebsd_triage 2025-06-01 22:03:27 UTC 
Purpose: https://cgit.freebsd.org/ports/commit/multimedia/zoneminder/Makefile?id=7113c9db460962b726bd1fb61f9b087637aebd9f

Upstream issue: https://github.com/ZoneMinder/zoneminder/issues/4333

I found only one place in "scripts/zmupdate.pl.in":
> use Data::Entropy::Algorithms qw(rand_bits);
> my $salt = Crypt::Eksblowfish::Bcrypt::en_base64(rand_bits(16*8));
I think it's easy to replace with another random generator.
> For most purposes (including cryptography and security),
> modules like Crypt::URandom, Crypt::SysRandom or Crypt::PRNG
> are more than adequate.
Ports:
security/p5-Crypt-URandom
security/p5-Crypt-SysRandom
security/p5-CryptX
Also there are:
security/p5-Bytes-Random-Secure
security/p5-Bytes-Random-Secure-Tiny