public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Paul Howarth <paul@city-fan.org>
To: git-commits@fedoraproject.org
Subject: [rpms/perl-Crypt-DSA] f43: Update to 1.22
Date: Fri, 03 Jul 2026 15:52:37 GMT	[thread overview]
Message-ID: <178309395720.1.8920285983275265397.rpms-perl-Crypt-DSA-7b9348105b62@fedoraproject.org> (raw)

            A new commit has been pushed.

            Repo   : rpms/perl-Crypt-DSA
            Branch : f43
            Commit : 7b9348105b62f396cb013c5a27b66b5ef06b9c09
            Author : Paul Howarth <paul@city-fan.org>
            Date   : 2026-07-03T16:22:47+01:00
            Stats  : +12/-6 in 2 file(s)
            URL    : https://src.fedoraproject.org/rpms/perl-Crypt-DSA/c/7b9348105b62f396cb013c5a27b66b5ef06b9c09?branch=f43

            Log:
            Update to 1.22

- New upstream release 1.22
  - Hardening: Use a fresh, independent CSPRNG witness every round
  - Security fix: Modulo bias in key generation (CVE-2026-14570); an attack
    with hundreds of signatures could lead to full private-key compromise;
    keys should be considered compromised and new keys should be generated

---
diff --git a/perl-Crypt-DSA.spec b/perl-Crypt-DSA.spec
index 7ffd8dc..229f723 100644
--- a/perl-Crypt-DSA.spec
+++ b/perl-Crypt-DSA.spec
@@ -1,14 +1,13 @@
 Summary:	Perl module for DSA signatures and key generation
 Name:		perl-Crypt-DSA
-Version:	1.21
-Release:	2%{?dist}
+Version:	1.22
+Release:	1%{?dist}
 License:	GPL-1.0-or-later OR Artistic-1.0-Perl
 Url:		https://metacpan.org/release/Crypt-DSA
 Source0:	https://www.cpan.org/modules/by-module/Crypt/Crypt-DSA-%{version}.tar.gz
 BuildArch:	noarch
 # Module Build
 BuildRequires:	coreutils
-BuildRequires:	findutils
 BuildRequires:	make
 BuildRequires:	perl-generators
 BuildRequires:	perl-interpreter
@@ -38,7 +37,7 @@ BuildRequires:	perl(Symbol)
 BuildRequires:	perl(vars)
 BuildRequires:	perl(warnings)
 # Test Suite
-BuildRequires:	perl(Test::More) >= 0.42
+BuildRequires:	perl(Test::More) >= 0.88
 # Optional Tests
 BuildRequires:	perl(Crypt::DES_EDE3)
 # Dependencies
@@ -88,8 +87,15 @@ make test
 %{_mandir}/man3/Crypt::DSA::Util.3*
 
 %changelog
+* Fri Jul  3 2026 Paul Howarth <paul@city-fan.org> - 1.22-1
+- Update to 1.22
+  - Hardening: Use a fresh, independent CSPRNG witness every round
+  - Security fix: Modulo bias in key generation (CVE-2026-14570); an attack
+    with hundreds of signatures could lead to full private-key compromise;
+    keys should be considered compromised and new keys should be generated
+
 * Fri Jun 19 2026 Yaakov Selkowitz <yselkowi@redhat.com> - 1.21-2
-- Rebuilt for openssl 4.0
+- Rebuilt for OpenSSL 4.0
 
 * Mon Jun 15 2026 Paul Howarth <paul@city-fan.org> - 1.21-1
 - Update to 1.21

diff --git a/sources b/sources
index 804620d..2b919b2 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (Crypt-DSA-1.21.tar.gz) = 915bf901ea1513e0b8b942533bb1b8277da9bdded42cf23b4533290f4d0dbb559ceda5d0111c990e3412bf83d86b45dbf0b6521b0b7e973d4ae542bf2574cd4d
+SHA512 (Crypt-DSA-1.22.tar.gz) = 3a55fef12fe2bb5cebc4ccb989b172799cb00abff6919df87405d3159747a832588be5acece2724d666fc8366da05a08829b7a65a6bcc1a90da83004c030e28d

                 reply	other threads:[~2026-07-03 15:52 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178309395720.1.8920285983275265397.rpms-perl-Crypt-DSA-7b9348105b62@fedoraproject.org \
    --to=paul@city-fan.org \
    --cc=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox