libcrypt-pbkdf2-perl (0.261630-1) [PTS] [DDPO]

OK: VCS matches the version in the archive

Git: https://salsa.debian.org/perl-team/modules/packages/libcrypt-pbkdf2-perl.git
JSON
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: master
Path: debian/changelog
Repo size: 114688
Browser: https://salsa.debian.org/perl-team/modules/packages/libcrypt-pbkdf2-perl
Last scan: 2026-09-06 13:15:06+00
Error: https://salsa.debian.org/api/v4/projects/perl-team%2Fmodules%2Fpackages%2Flibcrypt-pbkdf2-perl API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.
Next scan: 2026-09-15 05:36:00+00

Debian changelog in Git:

libcrypt-pbkdf2-perl (0.261630-1) unstable; urgency=medium

  * Team upload.
  * Import upstream version 0.261630.
    - Change the default hash algorithm to HMAC-SHA256, and increase the
      default number of iterations to 600,000 (CVE-2026-9641).
    - Generate salts using Crypt::URandom instead of perl's builtin `rand()`
      (CVE-2026-9638).
    - Use a constant-time comparison in `validate` to avoid timing attacks
      (CVE-2017-20240).
    Closes: #1139867
  * Update debian/upstream/metadata.
  * Update years of upstream copyright.
  * debian/control: update build/test/runtime dependencies.
  * Declare compliance with Debian Policy 4.7.4.
  * Remove «Priority: optional», which is the current default.
  * Annotate test-only build dependencies with <!nocheck>.

 -- gregor herrmann <gregoa@debian.org>  Sat, 13 Jun 2026 00:01:11 +0200

This branch is even with tag debian/0.261630-1