[rpms/perl-Dancer2] f43: Add CSPRNG modules as Requires

[rpms/perl-Dancer2] f43: Add CSPRNG modules as Requires

[Emmanuel Seyman]

A new commit has been pushed.

Repo   : rpms/perl-Dancer2
Branch : f43
Commit : c40bb54cf19688b5382a20c39bdb83ab72982878
Author : Emmanuel Seyman <emmanuel@seyman.fr>
Date   : 2026-09-07T00:31:08+02:00
Stats  : +10/-1 in 1 file(s)
URL    : https://src.fedoraproject.org/rpms/perl-Dancer2/c/c40bb54cf19688b5382a20c39bdb83ab72982878?branch=f43

Log:
Add CSPRNG modules as Requires

---
diff --git a/perl-Dancer2.spec b/perl-Dancer2.spec
index 421cd2a..fc50101 100644
--- a/perl-Dancer2.spec
+++ b/perl-Dancer2.spec
@@ -1,6 +1,6 @@
 Name:           perl-Dancer2
 Version:        1.1.2
-Release:        3%{?dist}
+Release:        4%{?dist}
 Summary:        Lightweight yet powerful web application framework
 License:        GPL-1.0-or-later OR Artistic-1.0-Perl
 
@@ -134,6 +134,12 @@ Requires:       perl(Test::EOL)
 Requires:       perl(Test::More) >= 0.92
 Requires:       perl(Types::Standard)
 Requires:       perl(YAML) >= 0.86
+# CVE-2026-13577
+# Dancer2 générates sessions id from low-entropy sources if
+# Crypt::URandom and Math::Random::ISAAC::XS are not present
+# We add them to the Requires so they are always there
+Requires:  perl(Crypt::URandom)
+Requires:  perl(Math::Random::ISAAC::XS)
 
 %{?perl_default_filter}
 %global __requires_exclude %{?__requires_exclude:__requires_exclude|}^perl\\(Exporter\\)$
@@ -184,6 +190,9 @@ provides nice, easily-extendable CLI interface for it.
 %{_bindir}/*
 
 %changelog
+* Sun Sep 06 2026 Emmanuel Seyman <emmanuel@seyman.fr> - 1.1.2-4
+- Add CSPRNG modules as Requires, fixes CVE-2026-13577 (#2509105)
+
 * Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.1.2-3
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild