[rpms/perl-Dancer2] f44: Add CSPRNG modules as Requires

[rpms/perl-Dancer2] f44: Add CSPRNG modules as Requires

[Emmanuel Seyman]

A new commit has been pushed.

Repo   : rpms/perl-Dancer2
Branch : f44
Commit : 0b143dde27c27cb5fc1b3fd3b9779ad5ead1542a
Author : Emmanuel Seyman <emmanuel@seyman.fr>
Date   : 2026-09-07T00:25:16+02:00
Stats  : +10/-1 in 1 file(s)
URL    : https://src.fedoraproject.org/rpms/perl-Dancer2/c/0b143dde27c27cb5fc1b3fd3b9779ad5ead1542a?branch=f44

Log:
Add CSPRNG modules as Requires

---
diff --git a/perl-Dancer2.spec b/perl-Dancer2.spec
index 7859b4a..21c1b73 100644
--- a/perl-Dancer2.spec
+++ b/perl-Dancer2.spec
@@ -1,6 +1,6 @@
 Name:           perl-Dancer2
 Version:        2.0.1
-Release:        3%{?dist}
+Release:        4%{?dist}
 Summary:        Lightweight yet powerful web application framework
 License:        GPL-1.0-or-later OR Artistic-1.0-Perl
 
@@ -136,6 +136,12 @@ Requires:       perl(Test::EOL)
 Requires:       perl(Test::More) >= 0.92
 Requires:       perl(Types::Standard)
 Requires:       perl(YAML) >= 0.86
+# CVE-2026-13577
+# Dancer2 générates sessions id from low-entropy sources if
+# Crypt::URandom and Math::Random::ISAAC::XS are not present
+# We add them to the Requires so they are always there
+Requires:  perl(Crypt::URandom)
+Requires:  perl(Math::Random::ISAAC::XS)
 
 %{?perl_default_filter}
 %global __requires_exclude %{?__requires_exclude:__requires_exclude|}^perl\\(Exporter\\)$
@@ -189,6 +195,9 @@ provides nice, easily-extendable CLI interface for it.
 %{_bindir}/*
 
 %changelog
+* Sun Sep 06 2026 Emmanuel Seyman <emmanuel@seyman.fr> - 2.0.1-4
+- Add CSPRNG modules as Requires, fixes CVE-2026-13577 (#2509105)
+
 * Sat Jan 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 2.0.1-3
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild