libnet-oauth-perl_0.30-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 04 Jan 2025 21:08:16 +0100
Source: libnet-oauth-perl
Architecture: source
Version: 0.30-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers at lists.alioth.debian.org>
Changed-By: gregor herrmann <gregoa at debian.org>
Closes: 1092056
Changes:
 libnet-oauth-perl (0.30-1) unstable; urgency=medium
 .
   * Import upstream version 0.30.
     - Net::OAuth::Client uses a better source of randomness for generating the
       nonce
 .
     [SECURITY] CVE-2025-22376:
     Default nonce for Net::OAuth package for perl is not cryptographically
     strong.
 .
     Closes: #1092056
 .
   * Add test and runtime dependency on libcrypt-urandom-perl as part of
     the fix for #1092056 / CVE-2025-22376.
   * Update build/test/runtime dependencies.
   * Drop patches, both applied upstream.
   * Update years of upstream and packaging copyright.
   * Update Upstream-Contact.
   * Add debian/upstream/metadata.
   * Declare compliance with Debian Policy 4.7.0.
Checksums-Sha1:
 944b1f65cedae64d0a732edb61028f628f07640c 2658 libnet-oauth-perl_0.30-1.dsc
 e505b86e19f4b0f2aab493189ee4682f8d287810 30347 libnet-oauth-perl_0.30.orig.tar.gz
 898f2f057dbc6b0d48208e14041ca2886d21ce2f 4104 libnet-oauth-perl_0.30-1.debian.tar.xz
Checksums-Sha256:
 20a88591123e1f3b286034574a4f67140cbc4a2c4e9b13ca1dfd30ffa778eb3e 2658 libnet-oauth-perl_0.30-1.dsc
 ed22ea36834c6cb99165c145b87766468de6a69a71e7bd6fb854966127aecfac 30347 libnet-oauth-perl_0.30.orig.tar.gz
 a4c27db201507fe81d46dfed53a34738103f98e8c46f7b94afed68d7fc571d2a 4104 libnet-oauth-perl_0.30-1.debian.tar.xz
Files:
 5b364132dc082f8d35dee99f5b5bfcf0 2658 perl optional libnet-oauth-perl_0.30-1.dsc
 85aa3bbb7dfab20de922bcafda5a55a7 30347 perl optional libnet-oauth-perl_0.30.orig.tar.gz
 dd81c41de02950f2237dd6819288fecd 4104 perl optional libnet-oauth-perl_0.30-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=finG
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20250104/a611621c/attachment.sig>