[rpms/perl-Dancer2] rawhide: Add CSPRNG modules as Requires

[rpms/perl-Dancer2] rawhide: Add CSPRNG modules as Requires

[Emmanuel Seyman]

A new commit has been pushed.

Repo   : rpms/perl-Dancer2
Branch : rawhide
Commit : 9ad7ff9256ef86998143381da66118f30897e489
Author : Emmanuel Seyman <emmanuel@seyman.fr>
Date   : 2026-09-07T00:17:42+02:00
Stats  : +10/-1 in 1 file(s)
URL    : https://src.fedoraproject.org/rpms/perl-Dancer2/c/9ad7ff9256ef86998143381da66118f30897e489?branch=rawhide

Log:
Add CSPRNG modules as Requires

---
diff --git a/perl-Dancer2.spec b/perl-Dancer2.spec
index dc9c90b..53dc6ef 100644
--- a/perl-Dancer2.spec
+++ b/perl-Dancer2.spec
@@ -1,6 +1,6 @@
 Name:           perl-Dancer2
 Version:        2.1.0
-Release:        2%{?dist}
+Release:        3%{?dist}
 Summary:        Lightweight yet powerful web application framework
 License:        GPL-1.0-or-later OR Artistic-1.0-Perl
 
@@ -136,6 +136,12 @@ Requires:       perl(Test::EOL)
 Requires:       perl(Test::More) >= 0.92
 Requires:       perl(Types::Standard)
 Requires:       perl(YAML) >= 0.86
+# CVE-2026-13577
+# Dancer2 générates sessions id from low-entropy sources if
+# Crypt::URandom and Math::Random::ISAAC::XS are not present
+# We add them to the Requires so they are always there
+Requires:  perl(Crypt::URandom)
+Requires:  perl(Math::Random::ISAAC::XS)
 
 %{?perl_default_filter}
 %global __requires_exclude %{?__requires_exclude:__requires_exclude|}^perl\\(Exporter\\)$
@@ -189,6 +195,9 @@ provides nice, easily-extendable CLI interface for it.
 %{_bindir}/*
 
 %changelog
+* Sun Sep 06 2026 Emmanuel Seyman <emmanuel@seyman.fr> - 2.1.0-3
+- Add CSPRNG modules as Requires, fixes CVE-2026-13577 (#2509105)
+
 * Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.0-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild