CVS commit: pkgsrc/security/p5-Crypt-DSA

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Mon Jun 15 14:05:52 UTC 2026

Modified Files:
        pkgsrc/security/p5-Crypt-DSA: Makefile distinfo

Log Message:
p5-Crypt-DSA: update to 1.21.

Security update. Please note that this package is deprecated.

1.21 -- Sun Jun 14 16:52:15 ADT 2026

    - This module is now makred as deprecated.  Crypt-DSA-GMP is a possible replacement.
    - Fixed CVE-2026-12205 key material reuse for multiple signing events
    - SECURITY (CWE-323): sign() reused the DSA nonce k across signatures
    (r and k^-1 were cached on the key and not regenerated), allowing
    private-key recovery from two signatures over different messages. Now
    generates a fresh nonce per signature. Keys used to sign more than
    once with an affected version should be considered compromised.


To generate a diff of this commit:
cvs rdiff -u -r1.47 -r1.48 pkgsrc/security/p5-Crypt-DSA/Makefile
cvs rdiff -u -r1.13 -r1.14 pkgsrc/security/p5-Crypt-DSA/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/p5-Crypt-DSA/Makefile
diff -u pkgsrc/security/p5-Crypt-DSA/Makefile:1.47 pkgsrc/security/p5-Crypt-DSA/Makefile:1.48
--- pkgsrc/security/p5-Crypt-DSA/Makefile:1.47  Sun May 24 08:27:40 2026
+++ pkgsrc/security/p5-Crypt-DSA/Makefile       Mon Jun 15 14:05:52 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.47 2026/05/24 08:27:40 wiz Exp $
+# $NetBSD: Makefile,v 1.48 2026/06/15 14:05:52 wiz Exp $
 
-DISTNAME=              Crypt-DSA-1.20
+DISTNAME=              Crypt-DSA-1.21
 PKGNAME=               p5-${DISTNAME}
 CATEGORIES=            security perl5
 MASTER_SITES=          ${MASTER_SITE_PERL_CPAN:=../../authors/id/T/TI/TIMLEGGE/}

Index: pkgsrc/security/p5-Crypt-DSA/distinfo
diff -u pkgsrc/security/p5-Crypt-DSA/distinfo:1.13 pkgsrc/security/p5-Crypt-DSA/distinfo:1.14
--- pkgsrc/security/p5-Crypt-DSA/distinfo:1.13  Sun May 24 08:27:40 2026
+++ pkgsrc/security/p5-Crypt-DSA/distinfo       Mon Jun 15 14:05:52 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.13 2026/05/24 08:27:40 wiz Exp $
+$NetBSD: distinfo,v 1.14 2026/06/15 14:05:52 wiz Exp $
 
-BLAKE2s (Crypt-DSA-1.20.tar.gz) = 6fde6f5799f44010da47db929eebd87539c0d0500f6a376dc9efa9a4cb4bf51e
-SHA512 (Crypt-DSA-1.20.tar.gz) = f181e90a605c5b6c9c02993168015fd26cd8351d0e6eff7044223a55324859bffb497ba53bac77970b613e4b01f93ddc915bff24493c09d215f3eada34324bb9
-Size (Crypt-DSA-1.20.tar.gz) = 29938 bytes
+BLAKE2s (Crypt-DSA-1.21.tar.gz) = b982390c7b31d07c294e85cab7096ab9914acf0863c79a7ded699974b4cbdf98
+SHA512 (Crypt-DSA-1.21.tar.gz) = 915bf901ea1513e0b8b942533bb1b8277da9bdded42cf23b4533290f4d0dbb559ceda5d0111c990e3412bf83d86b45dbf0b6521b0b7e973d4ae542bf2574cd4d
+Size (Crypt-DSA-1.21.tar.gz) = 31022 bytes