CVS commit: pkgsrc/security/p5-Crypt-JWT

["Wen Heping" <wen%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wen
Date:           Thu Jul 30 10:51:41 UTC 2026

Modified Files:
        pkgsrc/security/p5-Crypt-JWT: Makefile distinfo

Log Message:
Update to 0.038

Upstream changes:
0.038   2026-05-16
        - SECURITY:
            * constant-time MAC compare;
            * enforce JWK alg/use/key_ops and EC alg/crv consistency;
            * reject mixed-symmetry or duplicate-kid keysets;
            * cap PBES2 p2c and inflated payload size;
            * new $MIN_HMAC_KEY_LEN (4) and $MIN_RSA_BITS (2048);
            * new section SECURITY CONSIDERATIONS in POD
        - fix: ConcatKDF: INTEROP BREAK with <=0.037 for ECDH-ES + A192CBC-HS384 / A256CBC-HS512 only
        - fix: ECDH-ES apu/apv header values are base64url-decoded before KDF input
        - fix: AAD bit-length encoding (only diverged at AAD >= 512 MB)
        - fix: accepted_alg / accepted_enc now croak on unsupported types
        - aes_key_wrap/unwrap:
            * strict RFC 3394 (KW) vs RFC 5649 (KWP) modes;
            * ct length validation
            * fix unwrap of aligned KWP messages
        - require Compress::Raw::Zlib >= 2.057
        - new author-only Wycheproof harness t/wycheproof.t (AUTHOR_MODE=1)


To generate a diff of this commit:
cvs rdiff -u -r1.11 -r1.12 pkgsrc/security/p5-Crypt-JWT/Makefile
cvs rdiff -u -r1.7 -r1.8 pkgsrc/security/p5-Crypt-JWT/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/p5-Crypt-JWT/Makefile
diff -u pkgsrc/security/p5-Crypt-JWT/Makefile:1.11 pkgsrc/security/p5-Crypt-JWT/Makefile:1.12
--- pkgsrc/security/p5-Crypt-JWT/Makefile:1.11  Thu Jul 16 19:04:43 2026
+++ pkgsrc/security/p5-Crypt-JWT/Makefile       Thu Jul 30 10:51:41 2026
@@ -1,10 +1,9 @@
-# $NetBSD: Makefile,v 1.11 2026/07/16 19:04:43 wiz Exp $
+# $NetBSD: Makefile,v 1.12 2026/07/30 10:51:41 wen Exp $
 
-DISTNAME=              Crypt-JWT-0.037
+DISTNAME=              Crypt-JWT-0.038
 PKGNAME=               p5-${DISTNAME}
-PKGREVISION=           2
 CATEGORIES=            security perl5
-MASTER_SITES=          ${MASTER_SITE_PERL_CPAN:=Crypt/}
+MASTER_SITES=          ${MASTER_SITE_PERL_CPAN:=../../authors/id/M/MI/MIK/}
 
 MAINTAINER=            pkgsrc-users%NetBSD.org@localhost
 HOMEPAGE=              https://metacpan.org/pod/Crypt::JWT

Index: pkgsrc/security/p5-Crypt-JWT/distinfo
diff -u pkgsrc/security/p5-Crypt-JWT/distinfo:1.7 pkgsrc/security/p5-Crypt-JWT/distinfo:1.8
--- pkgsrc/security/p5-Crypt-JWT/distinfo:1.7   Sat May 10 12:25:19 2025
+++ pkgsrc/security/p5-Crypt-JWT/distinfo       Thu Jul 30 10:51:41 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.7 2025/05/10 12:25:19 wen Exp $
+$NetBSD: distinfo,v 1.8 2026/07/30 10:51:41 wen Exp $
 
-BLAKE2s (Crypt-JWT-0.037.tar.gz) = f438891de67f5ca847301f305dc70dfa7053b9d0651798a42c34e96ce9766d86
-SHA512 (Crypt-JWT-0.037.tar.gz) = 99e27643bdbd3647382d958660ba1199922acddd72e5e097f53f68c86b6b2d959955f90c6d32c1257ca0e243a9af637646808615fcde483ef9c8ea041c152ffe
-Size (Crypt-JWT-0.037.tar.gz) = 86387 bytes
+BLAKE2s (Crypt-JWT-0.038.tar.gz) = dec1108bf7aadbdc763e87c46486d24aef215130fc9aa1f8f3c1c9e0682d29e2
+SHA512 (Crypt-JWT-0.038.tar.gz) = 55f194f21759247f20b903defff347d5dff9fe2dc7b6559d0e4707ee8caaf945d8c04f555b314b5c5cc5ce3f93a85fb8b12b8f8be359295a6f65afad669eea66
+Size (Crypt-JWT-0.038.tar.gz) = 127069 bytes