CVS commit: pkgsrc/mail/p5-Email-Sender

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Mon Sep 21 17:39:09 UTC 2026

Modified Files:
        pkgsrc/mail/p5-Email-Sender: Makefile distinfo

Log Message:
p5-Email-Sender: update to 2.602.

Security fix release.

2.602     2026-09-21 11:09:22-04:00 America/New_York
        - SECURITY: the Sendmail transport built a shell command line on Win32,
          so an envelope address containing shell metacharacters -- which can
          come from the To, Cc, or From header of a message sent with
          Email::Sender::Simple -- could execute arbitrary commands.  On Win32,
          envelope addresses are now checked against a conservative pattern, and
          anything else is now rejected with a permanent failure.
          This is CVE-2026-84344.


To generate a diff of this commit:
cvs rdiff -u -r1.45 -r1.46 pkgsrc/mail/p5-Email-Sender/Makefile
cvs rdiff -u -r1.23 -r1.24 pkgsrc/mail/p5-Email-Sender/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/p5-Email-Sender/Makefile
diff -u pkgsrc/mail/p5-Email-Sender/Makefile:1.45 pkgsrc/mail/p5-Email-Sender/Makefile:1.46
--- pkgsrc/mail/p5-Email-Sender/Makefile:1.45   Thu Jul 16 19:04:03 2026
+++ pkgsrc/mail/p5-Email-Sender/Makefile        Mon Sep 21 17:39:09 2026
@@ -1,10 +1,9 @@
-# $NetBSD: Makefile,v 1.45 2026/07/16 19:04:03 wiz Exp $
+# $NetBSD: Makefile,v 1.46 2026/09/21 17:39:09 wiz Exp $
 
-DISTNAME=      Email-Sender-2.601
+DISTNAME=      Email-Sender-2.602
 PKGNAME=       p5-${DISTNAME}
-PKGREVISION=   3
 CATEGORIES=    mail perl5
-MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=Email/}
+MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=../../authors/id/R/RJ/RJBS/}
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
 HOMEPAGE=      https://metacpan.org/release/Email-Sender
@@ -22,9 +21,7 @@ DEPENDS+=     p5-Try-Tiny-[0-9]*:../../devel
 DEPENDS+=      p5-MooX-Types-MooseLike>=0.15:../../devel/p5-MooX-Types-MooseLike
 DEPENDS+=      p5-Module-Runtime>=0:../../devel/p5-Module-Runtime
 DEPENDS+=      p5-Sub-Exporter>=0:../../devel/p5-Sub-Exporter
-
-# for make test
-TOOL_DEPENDS+= p5-Capture-Tiny>=0.08:../../devel/p5-Capture-Tiny
+TEST_DEPENDS+= p5-Capture-Tiny>=0.08:../../devel/p5-Capture-Tiny
 
 PERL5_PACKLIST=        auto/Email/Sender/.packlist
 

Index: pkgsrc/mail/p5-Email-Sender/distinfo
diff -u pkgsrc/mail/p5-Email-Sender/distinfo:1.23 pkgsrc/mail/p5-Email-Sender/distinfo:1.24
--- pkgsrc/mail/p5-Email-Sender/distinfo:1.23   Sun Jan 28 11:45:15 2024
+++ pkgsrc/mail/p5-Email-Sender/distinfo        Mon Sep 21 17:39:09 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.23 2024/01/28 11:45:15 wiz Exp $
+$NetBSD: distinfo,v 1.24 2026/09/21 17:39:09 wiz Exp $
 
-BLAKE2s (Email-Sender-2.601.tar.gz) = 565870a58ec47d8c0886a9fff1410b2c9ff17e2e03976cb5c337738c9b791731
-SHA512 (Email-Sender-2.601.tar.gz) = ca349761607d4693eaac77c8f385799dffa3713dee642ca81271f377421c44d4b1712f16bc2834204d28448addb97576cbf50c8f28681e24940c691d6208b05a
-Size (Email-Sender-2.601.tar.gz) = 53312 bytes
+BLAKE2s (Email-Sender-2.602.tar.gz) = e1598c1489b6c2b0b9eab36b3b54b87f97122a9c9f0bba5e5e42f1cce660e71c
+SHA512 (Email-Sender-2.602.tar.gz) = f5bf8f6680ccda4c998a93a99be71195dba654b3c35f77144857ca559bc4c144589ea57c172a0d3f93e096169c81b499dbfd3e4c06148de0ae9574893531fba6
+Size (Email-Sender-2.602.tar.gz) = 56900 bytes