CVS commit: [pkgsrc-2026Q2] pkgsrc/textproc/p5-XML-Bare

"Maya Rashish" <[email protected]> Sat, 1 Aug 2026 19:41:20 +0000
Newsgroups gmane.os.netbsd.devel.pkgsrc.cvs
Message-ID <[email protected]>
Module Name:	pkgsrc
Committed By:	maya
Date:		Sat Aug  1 19:41:20 UTC 2026

Modified Files:
	pkgsrc/textproc/p5-XML-Bare [pkgsrc-2026Q2]: Makefile distinfo

Log Message:
Pullup ticket #7200 - requested by taca
textproc/p5-XML-Bare: Security fix

Revisions pulled up:
- textproc/p5-XML-Bare/Makefile                                 1.22
- textproc/p5-XML-Bare/distinfo                                 1.8

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Thu Jul 16 17:46:07 UTC 2026

   Modified Files:
   	pkgsrc/textproc/p5-XML-Bare: Makefile distinfo

   Log Message:
   p5-XML-Bare: fix CVE-2026-13401

   using upstream patch

   Bump PKGREVISION.


To generate a diff of this commit:
cvs rdiff -u -r1.21 -r1.21.8.1 pkgsrc/textproc/p5-XML-Bare/Makefile
cvs rdiff -u -r1.7 -r1.7.8.1 pkgsrc/textproc/p5-XML-Bare/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
(unnamed) (text/x-diff, 1.9 KB)
Modified files:

Index: pkgsrc/textproc/p5-XML-Bare/Makefile
diff -u pkgsrc/textproc/p5-XML-Bare/Makefile:1.21 pkgsrc/textproc/p5-XML-Bare/Makefile:1.21.8.1
--- pkgsrc/textproc/p5-XML-Bare/Makefile:1.21	Fri Jul  4 08:48:36 2025
+++ pkgsrc/textproc/p5-XML-Bare/Makefile	Sat Aug  1 19:41:20 2026
@@ -1,12 +1,15 @@
-# $NetBSD: Makefile,v 1.21 2025/07/04 08:48:36 wiz Exp $
-#
+# $NetBSD: Makefile,v 1.21.8.1 2026/08/01 19:41:20 maya Exp $
 
 DISTNAME=	XML-Bare-0.53
 PKGNAME=	p5-${DISTNAME}
-PKGREVISION=	13
+PKGREVISION=	14
 CATEGORIES=	textproc
 MASTER_SITES=	${MASTER_SITE_PERL_CPAN:=XML/}
 
+PATCHFILES+=		CVE-2026-13401-r1.patch
+PATCH_SITES+=		https://security.metacpan.org/patches/X/XML-Bare/0.53/
+PATCH_DIST_STRIP=	-p1
+
 MAINTAINER=	[email protected]
 HOMEPAGE=	https://metacpan.org/release/XML-Bare
 COMMENT=	Minimal XML parser implemented via a C state engine

Index: pkgsrc/textproc/p5-XML-Bare/distinfo
diff -u pkgsrc/textproc/p5-XML-Bare/distinfo:1.7 pkgsrc/textproc/p5-XML-Bare/distinfo:1.7.8.1
--- pkgsrc/textproc/p5-XML-Bare/distinfo:1.7	Wed Jul  2 03:52:04 2025
+++ pkgsrc/textproc/p5-XML-Bare/distinfo	Sat Aug  1 19:41:20 2026
@@ -1,5 +1,8 @@
-$NetBSD: distinfo,v 1.7 2025/07/02 03:52:04 markd Exp $
+$NetBSD: distinfo,v 1.7.8.1 2026/08/01 19:41:20 maya Exp $
 
+BLAKE2s (CVE-2026-13401-r1.patch) = d134f846cc289f09e61e1687f36ee53dafd30638009c1ac03631e965362ae00c
+SHA512 (CVE-2026-13401-r1.patch) = 0eed32c9341044d3a01d386fb4eb43a4036925a4a21dfb043d1ee7c236d5b2cc416f3ed16dfe6b6ba88def252117750615686762c238fc51a9a360363c93e251
+Size (CVE-2026-13401-r1.patch) = 1133 bytes
 BLAKE2s (XML-Bare-0.53.tar.gz) = 7b9268f4740cc23c3f1a4059b3ae77d4a883fcba2540c41835aa001a3f5a952e
 SHA512 (XML-Bare-0.53.tar.gz) = e765206e5c98ed3a0c29be3a323e25beaa712489d0461e2e7269f5f3383fa805ba3829a9ed4d31cd86f35400c321f8cf519162cc41f52f8ba6992c7016f63520
 Size (XML-Bare-0.53.tar.gz) = 79278 bytes