Sun, 08 Nov 2026 18:58:39 UTC Log in

perl-Crypt-DSA-1.24-2.fc45

complete
Perl module for DSA signatures and key generation built by guoguo completed Fri, 16 Oct 2026 18:10:01 UTC
Task 54784

Description

Crypt::DSA is an implementation of the DSA (Digital Signature Algorithm) signature verification system. This package provides DSA signing, signature verification, and key generation. DSA (Digital Signature Algorithm) signatures are no longer considered to be adequate for security. This module should only be used for verifying old signatures and should not be used for new signatures. That being said, some technologies still require DSA signatures even now. Consider using other solutions or explicitly not using DSA signatures. Crypt-DSA-GMP is a possible replacement.

RPMs

2 files, 2 arches
src
  • perl-Crypt-DSA-1.24-2.fc45.src.rpm 60.66 KB info · download
noarch
  • perl-Crypt-DSA-1.24-2.fc45.noarch.rpm 49.04 KB info · download

Logs

noarch

Changelog

* Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1.24-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild

* Wed Jul 08 2026 Paul Howarth <paul@city-fan.org> - 1.24-1
- Update to 1.24
  - Standardize on Crypt::SysRandom and drop the Crypt::URandom dependency
  - Make CVE tests optional

* Fri Jul 03 2026 Paul Howarth <paul@city-fan.org> - 1.22-1
- Update to 1.22
  - Hardening: Use a fresh, independent CSPRNG witness every round
  - Security fix: Modulo bias in key generation (CVE-2026-14570); an attack
    with hundreds of signatures could lead to full private-key compromise;
    keys should be considered compromised and new keys should be generated

* Fri Jun 19 2026 Yaakov Selkowitz <yselkowi@redhat.com> - 1.21-2
- Rebuilt for OpenSSL 4.0

* Mon Jun 15 2026 Paul Howarth <paul@city-fan.org> - 1.21-1
- Update to 1.21
  - Fixed key material reuse for multiple signing events (CVE-2026-12205,
    CWE-323)
    - sign() reused the DSA nonce k across signatures (r and k^-1 were cached
      on the key and not regenerated), allowing private-key recovery from two
      signatures over different messages
    - Now generates a fresh nonce per signature
    - Keys used to sign more than once with an affected version should be
      considered compromised

* Fri Jun 12 2026 Yaakov Selkowitz <yselkowi@redhat.com> - 1.20-2
- Rebuilt for openssl 4.0

* Mon May 18 2026 Paul Howarth <paul@city-fan.org> - 1.20-1
- Update to 1.20
  - This module is now marked as deprecated: Crypt-DSA-GMP is a possible
    replacement
  - Improve the call to IPC::Open3::open3
  - Replace two arg open (CVE-2026-8704)
  - Replace rand() (CVE-2026-8700)
  - Add a security policy
  - Add use warnings
  - Typo fix (CPAN RT#86424)

* Sat Jan 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1.19-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild

* Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.19-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild

* Sat Jan 18 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.19-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild

* Wed Dec 04 2024 Paul Howarth <paul@city-fan.org> - 1.19-1
- Update to 1.19
  - New maintainer
  - This release resolves CVE-2011-3599
  - Added a statement to recommend against using DSA
  - Fixed a few long standing bugs
  - The build process is moved to Dist::Zilla
- Switch source URL from cpan.metacpan.org to www.cpan.org

* Thu Jul 18 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.17-42
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild