CVE-2015-7764by Jeremyin Security Bulletinson Posted on August 9, 2017 Lemur 0.1.4 does not use sufficient entropy in its IV when encrypting AES in CBC mode.