public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/perl-Crypt-DSA] epel10: Update to 1.22
@ 2026-07-03 16:39 Paul Howarth
0 siblings, 0 replies; only message in thread
From: Paul Howarth @ 2026-07-03 16:39 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/perl-Crypt-DSA
Branch : epel10
Commit : efc7e31c457d2e01931559662b88afdbebf49c2e
Author : Paul Howarth <paul@city-fan.org>
Date : 2026-07-03T17:34:57+01:00
Stats : +78/-72 in 4 file(s)
URL : https://src.fedoraproject.org/rpms/perl-Crypt-DSA/c/efc7e31c457d2e01931559662b88afdbebf49c2e?branch=epel10
Log:
Update to 1.22
- New upstream release 1.22
- Hardening: Use a fresh, independent CSPRNG witness every round
- Security fix: Modulo bias in key generation (CVE-2026-14570); an attack
with hundreds of signatures could lead to full private-key compromise;
keys should be considered compromised and new keys should be generated
---
diff --git a/Crypt-DSA-1.21-use-Crypt::URandom-instead-of-Crypt::SysRandom.patch b/Crypt-DSA-1.21-use-Crypt::URandom-instead-of-Crypt::SysRandom.patch
deleted file mode 100644
index 22e719c..0000000
--- a/Crypt-DSA-1.21-use-Crypt::URandom-instead-of-Crypt::SysRandom.patch
+++ /dev/null
@@ -1,67 +0,0 @@
---- lib/Crypt/DSA/KeyChain.pm
-+++ lib/Crypt/DSA/KeyChain.pm
-@@ -9,7 +9,7 @@ use IPC::Open3;
- use File::Spec;
- use File::Which ();
- use Symbol qw( gensym );
--use Crypt::SysRandom qw( random_bytes );
-+use Crypt::URandom qw( urandom );
-
- our $VERSION = '1.21'; #VERSION
-
-@@ -83,7 +83,7 @@ sub generate_params {
- SCOPE: {
- print STDERR "." if $v;
- $seed = $param{Seed} ? delete $param{Seed} :
-- Crypt::SysRandom::random_bytes(20);
-+ Crypt::URandom::urandom(20);
- $seedp1 = _seed_plus_one($seed);
- my $md = sha1($seed) ^ sha1($seedp1);
- vec($md, 0, 8) |= 0x80;
-@@ -235,7 +235,7 @@ found.
- This is entirely optional, and if not provided a random seed will
- be generated automatically.
-
--B<Note>: This module now uses Crypt::SysRandom to generate a seed.
-+B<Note>: This module now uses Crypt::URandom to generate a seed.
- If you are not using one of the sources of randomness recommended at
- L<https://security.metacpan.org/docs/guides/random-data-for-security.html>
- you B<should not (must not)> provide your own Seed value.
---- Makefile.PL
-+++ Makefile.PL
-@@ -26,7 +26,6 @@ my %WriteMakefileArgs = (
- "PREREQ_PM" => {
- "Convert::ASN1" => 0,
- "Convert::PEM" => "0.13",
-- "Crypt::SysRandom" => 0,
- "Crypt::URandom" => 0,
- "Data::Buffer" => "0.01",
- "Digest::SHA" => 0,
-@@ -51,7 +50,6 @@ my %FallbackPrereqs = (
- "Convert::ASN1" => 0,
- "Convert::PEM" => "0.13",
- "Crypt::DES_EDE3" => 0,
-- "Crypt::SysRandom" => 0,
- "Crypt::URandom" => 0,
- "Data::Buffer" => "0.01",
- "Digest::SHA" => 0,
---- META.json
-+++ META.json
-@@ -37,7 +37,6 @@
- "requires" : {
- "Convert::ASN1" : "0",
- "Convert::PEM" : "0.13",
-- "Crypt::SysRandom" : "0",
- "Crypt::URandom" : "0",
- "Data::Buffer" : "0.01",
- "Digest::SHA" : "0",
---- META.yml
-+++ META.yml
-@@ -22,7 +22,6 @@ name: Crypt-DSA
- requires:
- Convert::ASN1: '0'
- Convert::PEM: '0.13'
-- Crypt::SysRandom: '0'
- Crypt::URandom: '0'
- Data::Buffer: '0.01'
- Digest::SHA: '0'
diff --git a/Crypt-DSA-1.22-use-Crypt::URandom-instead-of-Crypt::SysRandom.patch b/Crypt-DSA-1.22-use-Crypt::URandom-instead-of-Crypt::SysRandom.patch
new file mode 100644
index 0000000..83ce704
--- /dev/null
+++ b/Crypt-DSA-1.22-use-Crypt::URandom-instead-of-Crypt::SysRandom.patch
@@ -0,0 +1,67 @@
+--- lib/Crypt/DSA/KeyChain.pm
++++ lib/Crypt/DSA/KeyChain.pm
+@@ -9,7 +9,7 @@ use IPC::Open3;
+ use File::Spec;
+ use File::Which ();
+ use Symbol qw( gensym );
+-use Crypt::SysRandom qw( random_bytes );
++use Crypt::URandom qw( urandom );
+
+ our $VERSION = '1.22'; #VERSION
+
+@@ -83,7 +83,7 @@ sub generate_params {
+ SCOPE: {
+ print STDERR "." if $v;
+ $seed = $param{Seed} ? delete $param{Seed} :
+- Crypt::SysRandom::random_bytes(20);
++ Crypt::URandom::urandom(20);
+ $seedp1 = _seed_plus_one($seed);
+ my $md = sha1($seed) ^ sha1($seedp1);
+ vec($md, 0, 8) |= 0x80;
+@@ -235,7 +235,7 @@ found.
+ This is entirely optional, and if not provided a random seed will
+ be generated automatically.
+
+-B<Note>: This module now uses Crypt::SysRandom to generate a seed.
++B<Note>: This module now uses Crypt::URandom to generate a seed.
+ If you are not using one of the sources of randomness recommended at
+ L<https://security.metacpan.org/docs/guides/random-data-for-security.html>
+ you B<should not (must not)> provide your own Seed value.
+--- Makefile.PL
++++ Makefile.PL
+@@ -26,7 +26,6 @@ my %WriteMakefileArgs = (
+ "PREREQ_PM" => {
+ "Convert::ASN1" => 0,
+ "Convert::PEM" => "0.13",
+- "Crypt::SysRandom" => 0,
+ "Crypt::URandom" => 0,
+ "Data::Buffer" => "0.01",
+ "Digest::SHA" => 0,
+@@ -51,7 +50,6 @@ my %FallbackPrereqs = (
+ "Convert::ASN1" => 0,
+ "Convert::PEM" => "0.13",
+ "Crypt::DES_EDE3" => 0,
+- "Crypt::SysRandom" => 0,
+ "Crypt::URandom" => 0,
+ "Data::Buffer" => "0.01",
+ "Digest::SHA" => 0,
+--- META.json
++++ META.json
+@@ -37,7 +37,6 @@
+ "requires" : {
+ "Convert::ASN1" : "0",
+ "Convert::PEM" : "0.13",
+- "Crypt::SysRandom" : "0",
+ "Crypt::URandom" : "0",
+ "Data::Buffer" : "0.01",
+ "Digest::SHA" : "0",
+--- META.yml
++++ META.yml
+@@ -22,7 +22,6 @@ name: Crypt-DSA
+ requires:
+ Convert::ASN1: '0'
+ Convert::PEM: '0.13'
+- Crypt::SysRandom: '0'
+ Crypt::URandom: '0'
+ Data::Buffer: '0.01'
+ Digest::SHA: '0'
diff --git a/perl-Crypt-DSA.spec b/perl-Crypt-DSA.spec
index 41dba80..18480a6 100644
--- a/perl-Crypt-DSA.spec
+++ b/perl-Crypt-DSA.spec
@@ -1,15 +1,14 @@
Summary: Perl module for DSA signatures and key generation
Name: perl-Crypt-DSA
-Version: 1.21
+Version: 1.22
Release: 1%{?dist}
License: GPL-1.0-or-later OR Artistic-1.0-Perl
Url: https://metacpan.org/release/Crypt-DSA
Source0: https://www.cpan.org/modules/by-module/Crypt/Crypt-DSA-%{version}.tar.gz
-Patch0: Crypt-DSA-1.21-use-Crypt::URandom-instead-of-Crypt::SysRandom.patch
+Patch0: Crypt-DSA-1.22-use-Crypt::URandom-instead-of-Crypt::SysRandom.patch
BuildArch: noarch
# Module Build
BuildRequires: coreutils
-BuildRequires: findutils
BuildRequires: make
BuildRequires: perl-generators
BuildRequires: perl-interpreter
@@ -38,7 +37,7 @@ BuildRequires: perl(Symbol)
BuildRequires: perl(vars)
BuildRequires: perl(warnings)
# Test Suite
-BuildRequires: perl(Test::More) >= 0.42
+BuildRequires: perl(Test::More) >= 0.88
# Optional Tests
BuildRequires: perl(Crypt::DES_EDE3)
# Dependencies
@@ -94,6 +93,13 @@ make test
%{_mandir}/man3/Crypt::DSA::Util.3*
%changelog
+* Fri Jul 3 2026 Paul Howarth <paul@city-fan.org> - 1.22-1
+- Update to 1.22
+ - Hardening: Use a fresh, independent CSPRNG witness every round
+ - Security fix: Modulo bias in key generation (CVE-2026-14570); an attack
+ with hundreds of signatures could lead to full private-key compromise;
+ keys should be considered compromised and new keys should be generated
+
* Mon Jun 15 2026 Paul Howarth <paul@city-fan.org> - 1.21-1
- Update to 1.21
- Fixed key material reuse for multiple signing events (CVE-2026-12205,
diff --git a/sources b/sources
index 804620d..2b919b2 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (Crypt-DSA-1.21.tar.gz) = 915bf901ea1513e0b8b942533bb1b8277da9bdded42cf23b4533290f4d0dbb559ceda5d0111c990e3412bf83d86b45dbf0b6521b0b7e973d4ae542bf2574cd4d
+SHA512 (Crypt-DSA-1.22.tar.gz) = 3a55fef12fe2bb5cebc4ccb989b172799cb00abff6919df87405d3159747a832588be5acece2724d666fc8366da05a08829b7a65a6bcc1a90da83004c030e28d
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-07-03 16:39 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-07-03 16:39 [rpms/perl-Crypt-DSA] epel10: Update to 1.22 Paul Howarth
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox