FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

py-Elixir -- weak use of cryptography

Affected packages
	py310-Elixir	<=	0.8.0
	py311-Elixir	<=	0.8.0
	py37-Elixir	<=	0.8.0
	py38-Elixir	<=	0.8.0
	py39-Elixir	<=	0.8.0

Details

VuXML ID	2991178f-cbe8-11ed-956f-7054d21a9e2a
Discovery	2012-08-26
Entry	2023-03-26
Modified	2026-10-31

Red Hat Security Response Team reports:

Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector (IV), which makes it easier for context-dependent users to obtain sensitive information and decrypt the database.

[source]

References

CVE Name	CVE-2012-2146
URL	https://osv.dev/vulnerability/PYSEC-2012-13