libcrypt-pbkdf2-perl (0.261630-1) unstable; urgency=medium

  * Team upload.
  * Import upstream version 0.261630.
    - Change the default hash algorithm to HMAC-SHA256, and increase the
      default number of iterations to 600,000 (CVE-2026-9641).
    - Generate salts using Crypt::URandom instead of perl's builtin `rand()`
      (CVE-2026-9638).
    - Use a constant-time comparison in `validate` to avoid timing attacks
      (CVE-2017-20240).
    Closes: #1139867
  * Update debian/upstream/metadata.
  * Update years of upstream copyright.
  * debian/control: update build/test/runtime dependencies.
  * Declare compliance with Debian Policy 4.7.4.
  * Remove «Priority: optional», which is the current default.
  * Annotate test-only build dependencies with <!nocheck>.

 -- gregor herrmann <gregoa@debian.org>  Sat, 13 Jun 2026 00:01:11 +0200

libcrypt-pbkdf2-perl (0.161520-2) unstable; urgency=medium

  [ Damyan Ivanov ]
  * declare conformance with Policy 4.1.3 (no changes needed)

  [ Salvatore Bonaccorso ]
  * Update Vcs-* headers for switch to salsa.debian.org

  [ gregor herrmann ]
  * debian/watch: use uscan version 4.

  [ Debian Janitor ]
  * Remove constraints unnecessary since stretch:
    + Build-Depends-Indep: Drop versioned constraint on libmoo-perl,
      libtype-tiny-perl.
    + libcrypt-pbkdf2-perl: Drop versioned constraint on libmoo-perl,
      libtype-tiny-perl in Depends.

 -- Jelmer Vernooĳ <jelmer@debian.org>  Sun, 12 Jun 2022 22:28:53 +0100

libcrypt-pbkdf2-perl (0.161520-1) unstable; urgency=medium

  [ gregor herrmann ]
  * debian/copyright: change Copyright-Format 1.0 URL to HTTPS.

  [ Salvatore Bonaccorso ]
  * Import upstream version 0.161520

  [ gregor herrmann ]
  * debian/upstream/metadata: use HTTPS for GitHub URLs.

  [ Salvatore Bonaccorso ]
  * Update (build-)dependency requirement on libtype-tiny-perl.
    The module requires at least Types::Standard 1.000005, thus update
    libtype-tiny-perl versioned to (>= 1.000005).
  * Update copyright years for debian/* packaging files
  * Declare compliance with Debian policy 4.0.1

 -- Salvatore Bonaccorso <carnil@debian.org>  Mon, 07 Aug 2017 09:49:42 +0200

libcrypt-pbkdf2-perl (0.160410-1) unstable; urgency=medium

  * debian/control: Use HTTPS transport protocol for Vcs-Git URI
  * Import upstream version 0.160410
  * Update copyright years for upstream files
  * Update copyright years for debian/* packaging files
  * Replace Moose dependencies with Moo.
    Upstream switched from Moose to Moo. Replace libmoose-perl
    Build-Depends-Indep and Depends with libmoo-perl (>= 2.000000).
  * Add (build-)dependency on libtype-tiny-perl
  * Add (build-)dependency on libstrictures-perl
  * Declare compliance with Debian policy 3.9.7

 -- Salvatore Bonaccorso <carnil@debian.org>  Thu, 11 Feb 2016 07:40:21 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libcrypt-pbkdf2-perl`.
