Security Advisories (1)
CVE-2024-58041 (2026-02-24)

Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Smolder::DB::Developer uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.

Changes for version 1.50

  • Added bin/smolderctl - J. Swartz
  • Added configuration directives TruncateTestFilenames, ReportsPerPage, AutoRefreshReports - J. Swartz
  • smolder now exits if any options are invalid, instead of continuing on. - A. Lester
  • Documentation improvements - M. Stosberg
  • Now storing results per-stream - J. Swartz
  • Individual test files can be muted so they don't generate emails for a specified period of time - J. Swartz, M. Peters
  • Comments can be added to test files - J. Swartz, M. Peters
  • Allow anonymous reports to be uploaded by bin/smolder_smoke_signal - M. Peters
  • Fixed RT #49107 by trying to pick a better default hostname - M. Peters
  • Fixed RT #49993 by making smolder_smoke_signal default to 8080 just like Smolder does - M. Peters
  • Fixed RT #49997 by making sure we don't send duplicate emails if multiple accounts use the same address - M. Peters
  • Compile templates at startup time. - A. Schrab
  • Don't write a PidFile by default. The previous default location is likely to not be writeable. - A. Schrab
  • Added LogLevel configuration directive - M. Peters
  • Changed all uses of open() to be 3-arg version - B. Oaks

Documentation

Web Smoke Test Aggregator

Provides

in lib/Smolder/AuthHandler.pm
in lib/Smolder/Debug.pm
in lib/Smolder/Redirect.pm
in lib/Smolder/Server.pm
in lib/Smolder/Server/Control.pm
in lib/Smolder/Server/PreFork.pm
in lib/Smolder/Upgrade/V0_1.pm
in lib/Smolder/Upgrade/V0_3.pm
in lib/Smolder/Upgrade/V1_1.pm
in lib/Smolder/Upgrade/V1_21.pm
in lib/Smolder/Upgrade/V1_24.pm
in lib/Smolder/Upgrade/V1_30.pm
in lib/Smolder/Upgrade/V1_37.pm
in lib/Smolder/Upgrade/V1_50.pm
in lib/Smolder/Control.pm