perl-Crypt-DSA-1.17-31.el9 RPM for noarch

From EPEL 9 Testing for aarch64 / Packages / p

Crypt::DSA is an implementation of the DSA (Digital Signature Algorithm)
signature verification system. This package provides DSA signing, signature
verification, and key generation.

DSA (Digital Signature Algorithm) signatures are no longer considered to be
adequate for security. This module should only be used for verifying old
signatures and should not be used for new signatures. That being said, some
technologies still require DSA signatures even now. Consider using other
solutions or explicitly not using DSA signatures.

Provides

• perl-Crypt-DSA
• perl(BufferWithInt)
• perl(Crypt::DSA)
• perl(Crypt::DSA::Key)
• perl(Crypt::DSA::Key::PEM)
• perl(Crypt::DSA::Key::SSH2)
• perl(Crypt::DSA::KeyChain)
• perl(Crypt::DSA::Signature)
• perl(Crypt::DSA::Util)

Requires

• openssl
• perl(:MODULE_COMPAT_5.32.1)
• perl(:VERSION) >= 5.6.0
• perl(Carp)
• perl(Convert::ASN1)
• perl(Convert::PEM)
• perl(Crypt::DSA::Key)
• perl(Crypt::DSA::KeyChain)
• perl(Crypt::DSA::Signature)
• perl(Crypt::DSA::Util)
• perl(Crypt::URandom)
• perl(Data::Buffer)
• perl(Digest::SHA1)
• perl(Exporter)
• perl(Fcntl)
• perl(File::Spec)
• perl(File::Which)
• perl(IPC::Open3)
• perl(MIME::Base64)
• perl(Math::BigInt) >= 1.78
• perl(Math::BigInt::GMP)
• perl(Symbol)
• perl(base)
• perl(constant)
• perl(integer)
• perl(strict)
• perl(vars)
• perl-libs
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1

License

GPL-1.0-or-later OR Artistic-1.0-Perl

Changelog

* Fri Jul 03 2026 Paul Howarth <paul@city-fan.org> - 1.17-31
  - Hardening: Use a fresh, independent CSPRNG witness every round
  - Security fix: Modulo bias in key generation (CVE-2026-14570); an attack
    with hundreds of signatures could lead to full private-key compromise;
    keys should be considered compromised and new keys should be generated
* Mon Jun 15 2026 Paul Howarth <paul@city-fan.org> - 1.17-30
  - Fix key material reuse for multiple signing events (CVE-2026-12205, CWE-323)
* Mon May 18 2026 Paul Howarth <paul@city-fan.org> - 1.17-29
  - Replace use of cryptographically-insecure rand() function (CVE-2026-8700);
    use Crypt::URandom instead, which has a backend that calls getrandom() on
    Linux
  - Avoid use of 2-argument open() (CVE-2026-8704)
  - Fix "Use of uninitialized value $cur_part in hash element" warning in
    Crypt::DSA::KeyChain
  - Add security note discouraging use of Crypt::DSA
  - Fix typo in Crypt::DSA::Util
  - Use SPDX-format license tag

Files

/usr/share/doc/perl-Crypt-DSA
/usr/share/doc/perl-Crypt-DSA/Changes
/usr/share/doc/perl-Crypt-DSA/README
/usr/share/licenses/perl-Crypt-DSA
/usr/share/licenses/perl-Crypt-DSA/LICENSE
/usr/share/man/man3/Crypt::DSA.3pm.gz
/usr/share/man/man3/Crypt::DSA::Key.3pm.gz
/usr/share/man/man3/Crypt::DSA::Key::PEM.3pm.gz
/usr/share/man/man3/Crypt::DSA::Key::SSH2.3pm.gz
/usr/share/man/man3/Crypt::DSA::KeyChain.3pm.gz
/usr/share/man/man3/Crypt::DSA::Signature.3pm.gz
/usr/share/man/man3/Crypt::DSA::Util.3pm.gz
/usr/share/perl5/vendor_perl/Crypt
/usr/share/perl5/vendor_perl/Crypt/DSA
/usr/share/perl5/vendor_perl/Crypt/DSA.pm
/usr/share/perl5/vendor_perl/Crypt/DSA/Key
/usr/share/perl5/vendor_perl/Crypt/DSA/Key.pm
/usr/share/perl5/vendor_perl/Crypt/DSA/Key/PEM.pm
/usr/share/perl5/vendor_perl/Crypt/DSA/Key/SSH2.pm
/usr/share/perl5/vendor_perl/Crypt/DSA/KeyChain.pm
/usr/share/perl5/vendor_perl/Crypt/DSA/Signature.pm
/usr/share/perl5/vendor_perl/Crypt/DSA/Util.pm

Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Jul 11 04:10:56 2026