libcrypt-pbkdf2-perl (0.261630-1) unstable; urgency=medium

  * Team upload.
  * Import upstream version 0.261630.
    - Change the default hash algorithm to HMAC-SHA256, and increase the
      default number of iterations to 600,000 (CVE-2026-9641).
    - Generate salts using Crypt::URandom instead of perl's builtin `rand()`
      (CVE-2026-9638).
    - Use a constant-time comparison in `validate` to avoid timing attacks
      (CVE-2017-20240).
    Closes: #1139867
  * Update debian/upstream/metadata.
  * Update years of upstream copyright.
  * debian/control: update build/test/runtime dependencies.
  * Declare compliance with Debian Policy 4.7.4.
  * Remove «Priority: optional», which is the current default.
  * Annotate test-only build dependencies with <!nocheck>.

 -- gregor herrmann <gregoa@debian.org>  Sat, 13 Jun 2026 00:01:11 +0200

libcrypt-pbkdf2-perl (0.161520-2) unstable; urgency=medium

  [ Damyan Ivanov ]
  * declare conformance with Policy 4.1.3 (no changes needed)

  [ Salvatore Bonaccorso ]
  * Update Vcs-* headers for switch to salsa.debian.org

  [ gregor herrmann ]
  * debian/watch: use uscan version 4.

  [ Debian Janitor ]
  * Remove constraints unnecessary since stretch:
    + Build-Depends-Indep: Drop versioned constraint on libmoo-perl,
      libtype-tiny-perl.
    + libcrypt-pbkdf2-perl: Drop versioned constraint on libmoo-perl,
      libtype-tiny-perl in Depends.

 -- Jelmer Vernooĳ <jelmer@debian.org>  Sun, 12 Jun 2022 22:28:53 +0100

libcrypt-pbkdf2-perl (0.161520-1) unstable; urgency=medium

  [ gregor herrmann ]
  * debian/copyright: change Copyright-Format 1.0 URL to HTTPS.

  [ Salvatore Bonaccorso ]
  * Import upstream version 0.161520

  [ gregor herrmann ]
  * debian/upstream/metadata: use HTTPS for GitHub URLs.

  [ Salvatore Bonaccorso ]
  * Update (build-)dependency requirement on libtype-tiny-perl.
    The module requires at least Types::Standard 1.000005, thus update
    libtype-tiny-perl versioned to (>= 1.000005).
  * Update copyright years for debian/* packaging files
  * Declare compliance with Debian policy 4.0.1

 -- Salvatore Bonaccorso <carnil@debian.org>  Mon, 07 Aug 2017 09:49:42 +0200

libcrypt-pbkdf2-perl (0.160410-1) unstable; urgency=medium

  * debian/control: Use HTTPS transport protocol for Vcs-Git URI
  * Import upstream version 0.160410
  * Update copyright years for upstream files
  * Update copyright years for debian/* packaging files
  * Replace Moose dependencies with Moo.
    Upstream switched from Moose to Moo. Replace libmoose-perl
    Build-Depends-Indep and Depends with libmoo-perl (>= 2.000000).
  * Add (build-)dependency on libtype-tiny-perl
  * Add (build-)dependency on libstrictures-perl
  * Declare compliance with Debian policy 3.9.7

 -- Salvatore Bonaccorso <carnil@debian.org>  Thu, 11 Feb 2016 07:40:21 +0100

libcrypt-pbkdf2-perl (0.150900-1) unstable; urgency=medium

  * Import upstream version 0.150900
  * Update copyright years for upstream files
  * Update copyright years for debian/* packaging files
  * Make versioned (build-)dependency on libdigest-sha3-perl unversioned.
    Update versioned Build-Deopends-Indep and Depends on libdigest-sha3-perl
    to a unversioned dependency as the version is satisfied already in
    jessie.
  * Wrap and sort fields in debian/control file
  * Declare compliance with Debian policy 3.9.6
  * Add Testsuite: autopkgtest-pkg-perl field in debian/control

 -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 02 May 2015 07:35:38 +0200

libcrypt-pbkdf2-perl (0.142390-1) unstable; urgency=medium

  * Update Vcs-Browser URL to cgit web frontend
  * Add debian/upstream/metadata
  * Imported Upstream version 0.142390
  * Add myself to Uploaders
  * Add Build-Depends-Indep on libtest-fatal-perl
  * Mention module name in long description
  * Add (Build-)Depends(-Indep) on libdigest-sha3-perl (>= 0.22)
  * Mention SHA-3 in long description
  * Add myself to copyright holders for debian/* packaging

 -- Salvatore Bonaccorso <carnil@debian.org>  Tue, 02 Sep 2014 07:49:46 +0200

libcrypt-pbkdf2-perl (0.140890-1) unstable; urgency=medium

  * Team upload.
  * Imported Upstream version 0.140890
  * Drop (build-)depdendency for Method::Signatures::Simple.
    Drop Build-Depends-Indep and Depends on libmethod-signatures-simple-perl
    which is not used anymore.
  * Update copyright years for upstream files

 -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 13 Apr 2014 14:04:41 +0200

libcrypt-pbkdf2-perl (0.133330-1) unstable; urgency=medium

  * Initial release.  (Closes: #737362)

 -- Russ Allbery <rra@debian.org>  Tue, 4 Feb 2014 10:49:09 -0800
