CVS commit: pkgsrc/security/p5-Crypt-JWT
"Wen Heping" <[email protected]> Thu, 30 Jul 2026 10:51:41 +0000
| Newsgroups | gmane.os.netbsd.devel.pkgsrc.cvs |
|---|---|
| Message-ID | <[email protected]> |
Module Name: pkgsrc
Committed By: wen
Date: Thu Jul 30 10:51:41 UTC 2026
Modified Files:
pkgsrc/security/p5-Crypt-JWT: Makefile distinfo
Log Message:
Update to 0.038
Upstream changes:
0.038 2026-05-16
- SECURITY:
* constant-time MAC compare;
* enforce JWK alg/use/key_ops and EC alg/crv consistency;
* reject mixed-symmetry or duplicate-kid keysets;
* cap PBES2 p2c and inflated payload size;
* new $MIN_HMAC_KEY_LEN (4) and $MIN_RSA_BITS (2048);
* new section SECURITY CONSIDERATIONS in POD
- fix: ConcatKDF: INTEROP BREAK with <=0.037 for ECDH-ES + A192CBC-HS384 / A256CBC-HS512 only
- fix: ECDH-ES apu/apv header values are base64url-decoded before KDF input
- fix: AAD bit-length encoding (only diverged at AAD >= 512 MB)
- fix: accepted_alg / accepted_enc now croak on unsupported types
- aes_key_wrap/unwrap:
* strict RFC 3394 (KW) vs RFC 5649 (KWP) modes;
* ct length validation
* fix unwrap of aligned KWP messages
- require Compress::Raw::Zlib >= 2.057
- new author-only Wycheproof harness t/wycheproof.t (AUTHOR_MODE=1)
To generate a diff of this commit:
cvs rdiff -u -r1.11 -r1.12 pkgsrc/security/p5-Crypt-JWT/Makefile
cvs rdiff -u -r1.7 -r1.8 pkgsrc/security/p5-Crypt-JWT/distinfo
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
(unnamed)
(text/x-diff, 1.7 KB)
Modified files:
Index: pkgsrc/security/p5-Crypt-JWT/Makefile
diff -u pkgsrc/security/p5-Crypt-JWT/Makefile:1.11 pkgsrc/security/p5-Crypt-JWT/Makefile:1.12
--- pkgsrc/security/p5-Crypt-JWT/Makefile:1.11 Thu Jul 16 19:04:43 2026
+++ pkgsrc/security/p5-Crypt-JWT/Makefile Thu Jul 30 10:51:41 2026
@@ -1,10 +1,9 @@
-# $NetBSD: Makefile,v 1.11 2026/07/16 19:04:43 wiz Exp $
+# $NetBSD: Makefile,v 1.12 2026/07/30 10:51:41 wen Exp $
-DISTNAME= Crypt-JWT-0.037
+DISTNAME= Crypt-JWT-0.038
PKGNAME= p5-${DISTNAME}
-PKGREVISION= 2
CATEGORIES= security perl5
-MASTER_SITES= ${MASTER_SITE_PERL_CPAN:=Crypt/}
+MASTER_SITES= ${MASTER_SITE_PERL_CPAN:=../../authors/id/M/MI/MIK/}
MAINTAINER= [email protected]
HOMEPAGE= https://metacpan.org/pod/Crypt::JWT
Index: pkgsrc/security/p5-Crypt-JWT/distinfo
diff -u pkgsrc/security/p5-Crypt-JWT/distinfo:1.7 pkgsrc/security/p5-Crypt-JWT/distinfo:1.8
--- pkgsrc/security/p5-Crypt-JWT/distinfo:1.7 Sat May 10 12:25:19 2025
+++ pkgsrc/security/p5-Crypt-JWT/distinfo Thu Jul 30 10:51:41 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.7 2025/05/10 12:25:19 wen Exp $
+$NetBSD: distinfo,v 1.8 2026/07/30 10:51:41 wen Exp $
-BLAKE2s (Crypt-JWT-0.037.tar.gz) = f438891de67f5ca847301f305dc70dfa7053b9d0651798a42c34e96ce9766d86
-SHA512 (Crypt-JWT-0.037.tar.gz) = 99e27643bdbd3647382d958660ba1199922acddd72e5e097f53f68c86b6b2d959955f90c6d32c1257ca0e243a9af637646808615fcde483ef9c8ea041c152ffe
-Size (Crypt-JWT-0.037.tar.gz) = 86387 bytes
+BLAKE2s (Crypt-JWT-0.038.tar.gz) = dec1108bf7aadbdc763e87c46486d24aef215130fc9aa1f8f3c1c9e0682d29e2
+SHA512 (Crypt-JWT-0.038.tar.gz) = 55f194f21759247f20b903defff347d5dff9fe2dc7b6559d0e4707ee8caaf945d8c04f555b314b5c5cc5ce3f93a85fb8b12b8f8be359295a6f65afad669eea66
+Size (Crypt-JWT-0.038.tar.gz) = 127069 bytes