-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 29 Mar 2025 02:01:42 +0100 Source: libdata-entropy-perl Architecture: source Version: 0.008-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1101503 Changes: libdata-entropy-perl (0.008-1) unstable; urgency=medium . * Team upload. * Import upstream version 0.008. Use Crypt::URandom to seed the default algorithm with cryptographically secure random bytes instead of the builtin rand() function [CVE 2025-1860]. Closes: #1101503 * Add debian/upstream/metadata. * Update years of upstream copyright and Upstream-Contact. * Install new SECURITY.md file. * Add deprecation notice to debian/control. * Update test and runtime dependencies. * Declare compliance with Debian Policy 4.7.2. * Annotate test-only build dependencies with <!nocheck>. Checksums-Sha1: 0cbe10b229b193a3ef203951de7706c52ef06419 2682 libdata-entropy-perl_0.008-1.dsc 656bdf5e43c8457555dd8b2db1ae7e6b06038a21 40697 libdata-entropy-perl_0.008.orig.tar.gz 2789388180806f19946424a5d02b3d61813f987d 3536 libdata-entropy-perl_0.008-1.debian.tar.xz Checksums-Sha256: f26912266ca2a224c141310a487bad3c425a68c4ffb6bf983594f861293e82cf 2682 libdata-entropy-perl_0.008-1.dsc 18a52b1386e82c6b8cdb384a39861d60220a442a790e077010be72dd853b67b3 40697 libdata-entropy-perl_0.008.orig.tar.gz c25e47995dc6ef14bb39f868db00a1f2f5af9deeae23b25180ccb0830f60c3e8 3536 libdata-entropy-perl_0.008-1.debian.tar.xz Files: 05f57c6926390c4d173c0432e00245e7 2682 perl optional libdata-entropy-perl_0.008-1.dsc 378ed905d74a8b6a0bf03a045935a836 40697 perl optional libdata-entropy-perl_0.008.orig.tar.gz 6a4e01172ec108393bdb12e66219c2e1 3536 perl optional libdata-entropy-perl_0.008-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmfnR6NfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgZS4Q/9GI3Zq6aai9OeSWWKzFZ6jtQ6o9v0XQ2Ywa0UsIjlLmd27je1qqYvTChJ BxdL/n5KxU7FHgi3JHahn40gAHy9QTpHVKso7+CiMTXu0FMN5DTnq5ztyytA7KTS SN4HImYfE8fqpj9q1iMB1SHs+Y5uB8K8x9dFHIabDWpVUkX8a9yj+jGVWSG3w79Y 4HWR06FJtAOmkikIUTEK8YFGGyyV2id1sYLZ8Rg577vNodvdgjsWFUbwgjFo8USR 1hBPjLVID99bDwBGMUmbmhvZ2VdylrQq3k6cl4AG1TW4AMLhnB0ss7Aq0q9jeKiV rVYl9woZ4IYQmLeGALR5nXwpzMe5yEVwXF1Di3/OmVjZiXaM7EW7NsFFI3xb2j9S 1/6pRa5Ruv4svxTy9rzH8hCDbAOfp0lTGAyEWV5V8HL/X4l5MEC1kcRzQIHfMshb rN2wjeYF/zZLx+VN5Aux78AUW0zSry20Qx4+Ad1AktcBuRN5BeQ8dkWLNKt0XoGO NPsoe6htnOmARE72nQ2adWSUi0QL1ZaRfVxx7FX39DsrMr2ZqF2C38Xprxhcwq/H KT5EJAPiLSfZAG2QHGyOnEQXAEfu9COqhFBVMmiI5fDraQCiFKCtElqjyYFEUChg 89Vh311bN/LxKxjG9pqNGeKWytbpGr9JFFivD//cAQh3OoNRgNc= =4PiZ -----END PGP SIGNATURE-----