DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: libcrypt-nacl-sodium-perl 2.001-1

Package Information

DescriptionNaCl compatible modern, easy-to-use library for encryption, decryption, signatures, password hashing and more

Heartbleed was a serious vulnerability in OpenSSL. The ability to read past the end of a buffer is a serious bug, but what made it even worse is the fact that secret data could be disclosed by doing so.

In order to mitigate the impact of similar bugs, Data::BytesLocker provides heap allocation functions for storing sensitive data.

These are not general-purpose allocation functions. In particular, they are slower than regular scalars, and they require 3 or 4 extra pages of virtual memory (usually between 12-16kb extra memory will be used).

The stored data is placed at the end of a page boundary, immediately followed by a guard page. As a result, accessing memory past the end of the region will immediately terminate the application.

This description was automagically extracted from the module by dh-make-perl.

MaintainerRussell Coker <russell@coker.com.au>
Changed ByRussell Coker <russell@coker.com.au>
Sponsoretbe@debian.org
Distributionunstable
Architectureany
Trackerhttps://tracker.debian.org/pkg/libcrypt-nacl-sodium-perl
Uploaded5 months, 21 days ago

New Package Report

.changes
Changed-ByRussell Coker
Architecturesource amd64
Distributionunstable
DateSun, 15 Feb 2026 17:54:56 +1100
Sourcelibcrypt-nacl-sodium-perl
Version2.001-1
Changelog
libcrypt-nacl-sodium-perl (2.001-1) unstable; urgency=medium
 .
   * Initial release.
.dsc
Priorityoptional
Componentmain
Package-Listlibcrypt-nacl-sodium-perl deb perl optional arch=any
Sectionperl
debian/copyright
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Source: https://metacpan.org/release/Crypt-NaCl-Sodium
Upstream-Contact: Alex J. G. Burzyński <ajgb@cpan.org>
Upstream-Name: Crypt-NaCl-Sodium
DISCLAIMER: This copyright info was automatically extracted
 from the perl module. It may not be accurate, so you better
 check the module sources in order to ensure the module for its
 inclusion in Debian or for general legal information. Please,
 if licensing information is incorrectly generated, file a bug
 on dh-make-perl.
 NOTE: Don't forget to remove this disclaimer once you are happy
 with this file.

Files: *
Copyright: <INSERT COPYRIGHT YEAR(S) HERE>, Alex J. G. Burzyński <ajgb@cpan.org>
License: Artistic or GPL-1+

Files: debian/*
Copyright: 2025, Russell Coker <russell@coker.com.au>
License: Artistic or GPL-1+

License: Artistic
 This program is free software; you can redistribute it and/or modify
 it under the terms of the Artistic License, which comes with Perl.
 .
 On Debian systems, the complete text of the Artistic License can be
 found in `/usr/share/common-licenses/Artistic'.

License: GPL-1+
 This program is free software; you can redistribute it and/or modify
 it under the terms of the GNU General Public License as published by
 the Free Software Foundation; either version 1, or (at your option)
 any later version.
 .
 On Debian systems, the complete text of version 1 of the GNU General
 Public License can be found in `/usr/share/common-licenses/GPL-1'.

Review Information

rejected — allocated to mechtilde 5 months, 8 days ago, started 5 months, 8 days ago, completed 5 months, 8 days ago.

Final Comment

Hello Russell,

lintian shows one errore and several warnings about publishing templates.
This applies to d/copyright and d/control.

Please use consistence URL for d/copyright and d/upstream/metadata.

In Addition: You can also update standad-version to recent one

Regards

Public Notes

5 months, 8 days ago ● public

Lintian

Command: lintian -cEI -L '>=warning' --show-overrides --color=never ../$(basename $PWD)_*.changes
Exit code: 2

E: libcrypt-nacl-sodium-perl: helper-templates-in-copyright
W: libcrypt-nacl-sodium-perl: copyright-contains-automatically-extracted-boilerplate
W: libcrypt-nacl-sodium-perl: description-contains-dh-make-perl-template line 16
W: libcrypt-nacl-sodium-perl: initial-upload-closes-no-bugs [usr/share/doc/libcrypt-nacl-sodium-perl/changelog.Debian.gz:1]
W: libcrypt-nacl-sodium-perl: synopsis-too-long
X: libcrypt-nacl-sodium-perl: perl-module-name-not-mentioned-in-description Crypt::Nacl::Sodium

Back to Dashboard | View all reviews for this package