perl-Crypt-DSA.changes

@@ -1,3 +1,20 @@
+-------------------------------------------------------------------
+Mon Jul  6 09:11:38 UTC 2026 - Tina Müller <timueller+perl@suse.de>
+
+- updated to 1.240.0 (1.24)
+   see /usr/share/doc/packages/perl-Crypt-DSA/Changes
+
+  1.24 -- Sun Jul 05 20:26:37 ADT 2026
+      - Standardize on Crypt::SysRandom and drop the Crypt::URandom dependency
+  1.23 -- Fri Jul 03 17:18:40 ADT 2026
+      - Make CVE tests optional
+  1.22 -- Fri Jul 03 09:27:46 ADT 2026
+      - This module is deprecated as of 1.20.  Crypt-DSA-GMP is a possible replacement.
+      - Hardening: Use a fresh, independent CSPRNG witness every round
+      - Security fix: Fixes CVE-2026-14570 modulo bias in key generation.
+      An attack with hundreds of signatures could lead to full private-key compromise.
+      Keys should be considered compromised and new keys should be generated.
+
 -------------------------------------------------------------------
 Mon Jun 15 11:24:13 UTC 2026 - Tina Müller <timueller+perl@suse.de>
 

perl-Crypt-DSA.spec

@@ -18,10 +18,10 @@
 
 %define cpan_name Crypt-DSA
 Name:           perl-Crypt-DSA
-Version:        1.210.0
+Version:        1.240.0
 Release:        0
-# 1.21 -> normalize -> 1.210.0
-%define cpan_version 1.21
+# 1.24 -> normalize -> 1.240.0
+%define cpan_version 1.24
 License:        Artistic-1.0 OR GPL-1.0-or-later
 Summary:        DSA Signatures and Key Generation
 URL:            https://metacpan.org/release/%{cpan_name}
@@ -35,7 +35,6 @@ BuildRequires:  perl(Convert::ASN1)
 BuildRequires:  perl(Convert::PEM) >= 0.130
 BuildRequires:  perl(Crypt::DES_EDE3)
 BuildRequires:  perl(Crypt::SysRandom)
-BuildRequires:  perl(Crypt::URandom)
 BuildRequires:  perl(Data::Buffer) >= 0.10
 BuildRequires:  perl(Digest::SHA)
 BuildRequires:  perl(ExtUtils::MakeMaker) >= 6.42
@@ -44,7 +43,6 @@ BuildRequires:  perl(Math::BigInt) >= 1.78
 Requires:       perl(Convert::ASN1)
 Requires:       perl(Convert::PEM) >= 0.130
 Requires:       perl(Crypt::SysRandom)
-Requires:       perl(Crypt::URandom)
 Requires:       perl(Data::Buffer) >= 0.10
 Requires:       perl(Digest::SHA)
 Requires:       perl(File::Which) >= 0.50