public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/perl-Crypt-DSA] rawhide: Update to 1.22
@ 2026-07-03 15:23 Paul Howarth
  0 siblings, 0 replies; only message in thread
From: Paul Howarth @ 2026-07-03 15:23 UTC (permalink / raw)
  To: git-commits

            A new commit has been pushed.

            Repo   : rpms/perl-Crypt-DSA
            Branch : rawhide
            Commit : 7b9348105b62f396cb013c5a27b66b5ef06b9c09
            Author : Paul Howarth <paul@city-fan.org>
            Date   : 2026-07-03T16:22:47+01:00
            Stats  : +12/-6 in 2 file(s)
            URL    : https://src.fedoraproject.org/rpms/perl-Crypt-DSA/c/7b9348105b62f396cb013c5a27b66b5ef06b9c09?branch=rawhide

            Log:
            Update to 1.22

- New upstream release 1.22
  - Hardening: Use a fresh, independent CSPRNG witness every round
  - Security fix: Modulo bias in key generation (CVE-2026-14570); an attack
    with hundreds of signatures could lead to full private-key compromise;
    keys should be considered compromised and new keys should be generated

---
diff --git a/perl-Crypt-DSA.spec b/perl-Crypt-DSA.spec
index 7ffd8dc..229f723 100644
--- a/perl-Crypt-DSA.spec
+++ b/perl-Crypt-DSA.spec
@@ -1,14 +1,13 @@
 Summary:	Perl module for DSA signatures and key generation
 Name:		perl-Crypt-DSA
-Version:	1.21
-Release:	2%{?dist}
+Version:	1.22
+Release:	1%{?dist}
 License:	GPL-1.0-or-later OR Artistic-1.0-Perl
 Url:		https://metacpan.org/release/Crypt-DSA
 Source0:	https://www.cpan.org/modules/by-module/Crypt/Crypt-DSA-%{version}.tar.gz
 BuildArch:	noarch
 # Module Build
 BuildRequires:	coreutils
-BuildRequires:	findutils
 BuildRequires:	make
 BuildRequires:	perl-generators
 BuildRequires:	perl-interpreter
@@ -38,7 +37,7 @@ BuildRequires:	perl(Symbol)
 BuildRequires:	perl(vars)
 BuildRequires:	perl(warnings)
 # Test Suite
-BuildRequires:	perl(Test::More) >= 0.42
+BuildRequires:	perl(Test::More) >= 0.88
 # Optional Tests
 BuildRequires:	perl(Crypt::DES_EDE3)
 # Dependencies
@@ -88,8 +87,15 @@ make test
 %{_mandir}/man3/Crypt::DSA::Util.3*
 
 %changelog
+* Fri Jul  3 2026 Paul Howarth <paul@city-fan.org> - 1.22-1
+- Update to 1.22
+  - Hardening: Use a fresh, independent CSPRNG witness every round
+  - Security fix: Modulo bias in key generation (CVE-2026-14570); an attack
+    with hundreds of signatures could lead to full private-key compromise;
+    keys should be considered compromised and new keys should be generated
+
 * Fri Jun 19 2026 Yaakov Selkowitz <yselkowi@redhat.com> - 1.21-2
-- Rebuilt for openssl 4.0
+- Rebuilt for OpenSSL 4.0
 
 * Mon Jun 15 2026 Paul Howarth <paul@city-fan.org> - 1.21-1
 - Update to 1.21

diff --git a/sources b/sources
index 804620d..2b919b2 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (Crypt-DSA-1.21.tar.gz) = 915bf901ea1513e0b8b942533bb1b8277da9bdded42cf23b4533290f4d0dbb559ceda5d0111c990e3412bf83d86b45dbf0b6521b0b7e973d4ae542bf2574cd4d
+SHA512 (Crypt-DSA-1.22.tar.gz) = 3a55fef12fe2bb5cebc4ccb989b172799cb00abff6919df87405d3159747a832588be5acece2724d666fc8366da05a08829b7a65a6bcc1a90da83004c030e28d

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-07-03 15:23 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-07-03 15:23 [rpms/perl-Crypt-DSA] rawhide: Update to 1.22 Paul Howarth

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox