public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/perl-Crypt-DSA] rawhide: Update to 1.22
@ 2026-07-03 15:23 Paul Howarth
0 siblings, 0 replies; only message in thread
From: Paul Howarth @ 2026-07-03 15:23 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/perl-Crypt-DSA
Branch : rawhide
Commit : 7b9348105b62f396cb013c5a27b66b5ef06b9c09
Author : Paul Howarth <paul@city-fan.org>
Date : 2026-07-03T16:22:47+01:00
Stats : +12/-6 in 2 file(s)
URL : https://src.fedoraproject.org/rpms/perl-Crypt-DSA/c/7b9348105b62f396cb013c5a27b66b5ef06b9c09?branch=rawhide
Log:
Update to 1.22
- New upstream release 1.22
- Hardening: Use a fresh, independent CSPRNG witness every round
- Security fix: Modulo bias in key generation (CVE-2026-14570); an attack
with hundreds of signatures could lead to full private-key compromise;
keys should be considered compromised and new keys should be generated
---
diff --git a/perl-Crypt-DSA.spec b/perl-Crypt-DSA.spec
index 7ffd8dc..229f723 100644
--- a/perl-Crypt-DSA.spec
+++ b/perl-Crypt-DSA.spec
@@ -1,14 +1,13 @@
Summary: Perl module for DSA signatures and key generation
Name: perl-Crypt-DSA
-Version: 1.21
-Release: 2%{?dist}
+Version: 1.22
+Release: 1%{?dist}
License: GPL-1.0-or-later OR Artistic-1.0-Perl
Url: https://metacpan.org/release/Crypt-DSA
Source0: https://www.cpan.org/modules/by-module/Crypt/Crypt-DSA-%{version}.tar.gz
BuildArch: noarch
# Module Build
BuildRequires: coreutils
-BuildRequires: findutils
BuildRequires: make
BuildRequires: perl-generators
BuildRequires: perl-interpreter
@@ -38,7 +37,7 @@ BuildRequires: perl(Symbol)
BuildRequires: perl(vars)
BuildRequires: perl(warnings)
# Test Suite
-BuildRequires: perl(Test::More) >= 0.42
+BuildRequires: perl(Test::More) >= 0.88
# Optional Tests
BuildRequires: perl(Crypt::DES_EDE3)
# Dependencies
@@ -88,8 +87,15 @@ make test
%{_mandir}/man3/Crypt::DSA::Util.3*
%changelog
+* Fri Jul 3 2026 Paul Howarth <paul@city-fan.org> - 1.22-1
+- Update to 1.22
+ - Hardening: Use a fresh, independent CSPRNG witness every round
+ - Security fix: Modulo bias in key generation (CVE-2026-14570); an attack
+ with hundreds of signatures could lead to full private-key compromise;
+ keys should be considered compromised and new keys should be generated
+
* Fri Jun 19 2026 Yaakov Selkowitz <yselkowi@redhat.com> - 1.21-2
-- Rebuilt for openssl 4.0
+- Rebuilt for OpenSSL 4.0
* Mon Jun 15 2026 Paul Howarth <paul@city-fan.org> - 1.21-1
- Update to 1.21
diff --git a/sources b/sources
index 804620d..2b919b2 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (Crypt-DSA-1.21.tar.gz) = 915bf901ea1513e0b8b942533bb1b8277da9bdded42cf23b4533290f4d0dbb559ceda5d0111c990e3412bf83d86b45dbf0b6521b0b7e973d4ae542bf2574cd4d
+SHA512 (Crypt-DSA-1.22.tar.gz) = 3a55fef12fe2bb5cebc4ccb989b172799cb00abff6919df87405d3159747a832588be5acece2724d666fc8366da05a08829b7a65a6bcc1a90da83004c030e28d
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-07-03 15:23 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-07-03 15:23 [rpms/perl-Crypt-DSA] rawhide: Update to 1.22 Paul Howarth
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox