public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Paul Howarth <paul@city-fan.org>
To: git-commits@fedoraproject.org
Subject: [rpms/perl-Crypt-DSA] f43: Update to 1.22
Date: Fri, 03 Jul 2026 15:52:37 GMT [thread overview]
Message-ID: <178309395720.1.8920285983275265397.rpms-perl-Crypt-DSA-7b9348105b62@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/perl-Crypt-DSA
Branch : f43
Commit : 7b9348105b62f396cb013c5a27b66b5ef06b9c09
Author : Paul Howarth <paul@city-fan.org>
Date : 2026-07-03T16:22:47+01:00
Stats : +12/-6 in 2 file(s)
URL : https://src.fedoraproject.org/rpms/perl-Crypt-DSA/c/7b9348105b62f396cb013c5a27b66b5ef06b9c09?branch=f43
Log:
Update to 1.22
- New upstream release 1.22
- Hardening: Use a fresh, independent CSPRNG witness every round
- Security fix: Modulo bias in key generation (CVE-2026-14570); an attack
with hundreds of signatures could lead to full private-key compromise;
keys should be considered compromised and new keys should be generated
---
diff --git a/perl-Crypt-DSA.spec b/perl-Crypt-DSA.spec
index 7ffd8dc..229f723 100644
--- a/perl-Crypt-DSA.spec
+++ b/perl-Crypt-DSA.spec
@@ -1,14 +1,13 @@
Summary: Perl module for DSA signatures and key generation
Name: perl-Crypt-DSA
-Version: 1.21
-Release: 2%{?dist}
+Version: 1.22
+Release: 1%{?dist}
License: GPL-1.0-or-later OR Artistic-1.0-Perl
Url: https://metacpan.org/release/Crypt-DSA
Source0: https://www.cpan.org/modules/by-module/Crypt/Crypt-DSA-%{version}.tar.gz
BuildArch: noarch
# Module Build
BuildRequires: coreutils
-BuildRequires: findutils
BuildRequires: make
BuildRequires: perl-generators
BuildRequires: perl-interpreter
@@ -38,7 +37,7 @@ BuildRequires: perl(Symbol)
BuildRequires: perl(vars)
BuildRequires: perl(warnings)
# Test Suite
-BuildRequires: perl(Test::More) >= 0.42
+BuildRequires: perl(Test::More) >= 0.88
# Optional Tests
BuildRequires: perl(Crypt::DES_EDE3)
# Dependencies
@@ -88,8 +87,15 @@ make test
%{_mandir}/man3/Crypt::DSA::Util.3*
%changelog
+* Fri Jul 3 2026 Paul Howarth <paul@city-fan.org> - 1.22-1
+- Update to 1.22
+ - Hardening: Use a fresh, independent CSPRNG witness every round
+ - Security fix: Modulo bias in key generation (CVE-2026-14570); an attack
+ with hundreds of signatures could lead to full private-key compromise;
+ keys should be considered compromised and new keys should be generated
+
* Fri Jun 19 2026 Yaakov Selkowitz <yselkowi@redhat.com> - 1.21-2
-- Rebuilt for openssl 4.0
+- Rebuilt for OpenSSL 4.0
* Mon Jun 15 2026 Paul Howarth <paul@city-fan.org> - 1.21-1
- Update to 1.21
diff --git a/sources b/sources
index 804620d..2b919b2 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (Crypt-DSA-1.21.tar.gz) = 915bf901ea1513e0b8b942533bb1b8277da9bdded42cf23b4533290f4d0dbb559ceda5d0111c990e3412bf83d86b45dbf0b6521b0b7e973d4ae542bf2574cd4d
+SHA512 (Crypt-DSA-1.22.tar.gz) = 3a55fef12fe2bb5cebc4ccb989b172799cb00abff6919df87405d3159747a832588be5acece2724d666fc8366da05a08829b7a65a6bcc1a90da83004c030e28d
reply other threads:[~2026-07-03 15:52 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178309395720.1.8920285983275265397.rpms-perl-Crypt-DSA-7b9348105b62@fedoraproject.org \
--to=paul@city-fan.org \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox