-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 16 May 2026 18:19:54 +0200 Source: libcrypt-dsa-perl Architecture: source Version: 1.20-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1136808 1136809 Changes: libcrypt-dsa-perl (1.20-1) unstable; urgency=medium . * Team upload. * Import upstream version 1.20. - Security Fix CVE-2026-8704: replace two arg open Closes: #1136809 - Security Fix CVE-2026-8700: replace rand() Closes: #1136808 * Install new security document. * New test and runtime dependency: libcrypt-sysrandom-perl. * Update years of upstream copyright. * Declare compliance with Debian Policy 4.7.4. * Remove «Rules-Requires-Root: no», which is the current default. * Remove «Priority: optional», which is the current default. Checksums-Sha1: dd5f156ef436fbd7071d614499d7fd9bd51c3eeb 2609 libcrypt-dsa-perl_1.20-1.dsc 540c98415f682692bb2540980021f87bfc94598f 29938 libcrypt-dsa-perl_1.20.orig.tar.gz e35fcc0c857b8d56b112faa5134ea53293e3a1bf 2844 libcrypt-dsa-perl_1.20-1.debian.tar.xz Checksums-Sha256: e9829117e636a5198e52dd75ed368d858f79e1633bfefff6d3e778bf410c4f2c 2609 libcrypt-dsa-perl_1.20-1.dsc e5e98ec85737339a2881b9a33744639b1bcc135db135bc9a96b52ea44d218e4d 29938 libcrypt-dsa-perl_1.20.orig.tar.gz 35692bd4d56644bc70245634d48bd1a30d43561e4fe22fd5bd65789fb3077d72 2844 libcrypt-dsa-perl_1.20-1.debian.tar.xz Files: 6d1db8ad16e1919d8317756a19d2704b 2609 perl optional libcrypt-dsa-perl_1.20-1.dsc 3e1fd267c848e55b6ffaeb436876c370 29938 perl optional libcrypt-dsa-perl_1.20.orig.tar.gz f6e78d1892e52e67d6a4509070f5da4f 2844 perl optional libcrypt-dsa-perl_1.20-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmoIm4dfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgYK9hAApLOrrkudTgSFKPJK8FhL6R+thc9Hq70XfARSW/7oVVE2wohpX0yNHcMc YzlQNV51mfiEOo4P5GdVUp+3UXjaCxkQwrm6c6/1n+UePnI9fdkmjzu5ldOJNQn1 9brtZ1ux9HTBRIumzDsfRlGowS4sk2iKZuUTtliKvQ90+O8agQSrXUT6VdyDXx3c pnfFev2tfLQ3gkANzzSQJ8U3UP23XdyJiZhnHP5vF3pqg5MxwcEIvsMC1ah9zLwb BP1SzQONlgWMYTH6Njon6QvCRF+OOSIr78mhTAHe/vbbn+pFRQ6lDjYS9GkDU1Sv 8gDYhRbA1rK6UTeU2uVxh+0xE+lYmo4kDLzhu/C566AM2Q0e5QTMKntmbyhy4Asu ++ym+EF73LTfLUmPmoV+oUc0tIdxImtOxkTaECDXSeknAndl/5pV/dxkA1GtKFml B6mPyrae4LkQxxLrsrbb4z5swGXKJ2dNUjfojEcWjOYanyFMOGuzpl14H3D2nPgX znsOA4hVkwuKeRFqLibqMKn6QRvrMJNfQ/PtOLDqopJZQZVXIOHzbzxyXt2arrkV yjE0fLG7oFye51CnMOAEiMrKxP+cIm80sx49l3jdLkNNNUh+wxOM3YeK6ikBKhaW CPqSFE3Fq7q6sExA94MHmD1BE7Wm+h8/HPyHtJxKJt7kVRNLEQ8= =Td5K -----END PGP SIGNATURE-----