Biased DSA nonce/private-key generation in Crypt::DSA for Perl (CVE-2026-14570)

Crypt::DSA versions before 1.22 for Perl derive the DSA signing nonce and private key from a biased random generator (`Crypt::DSA::Util::makerandom`), which forces the high bit of every returned value, making the output non-uniform. An attacker who collects a modest number of signatures under an affected key, together with the public key, can recover the private key via a lattice attack. Keys signed with an affected version should be considered compromised and must be revoked and regenerated. Affected versions: - before 1.22 We recommend updating to: 1.22. CVSS 7.5 · our assessment: this_week Reference: https://seclists.org/oss-sec/2026/q3/28 Details: https://vuln.today/cve/CVE-2026-14570