CVS commit: [pkgsrc-2026Q3] pkgsrc/databases/p5-DBI

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Tue Oct 20 23:33:59 UTC 2026

Modified Files:
        pkgsrc/databases/p5-DBI [pkgsrc-2026Q3]: Makefile distinfo
Added Files:
        pkgsrc/databases/p5-DBI/patches [pkgsrc-2026Q3]: patch-DBI.xs

Log Message:
Pullup ticket #7282 - requested by taca
databases/p5-DBI: Security fix

Revisions pulled up:
- databases/p5-DBI/Makefile                                     1.103
- databases/p5-DBI/distinfo                                     1.66-1.68
- databases/p5-DBI/patches/patch-DBI.xs                         1.1-1.2

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Sun Sep 27 09:43:29 UTC 2026

   Modified Files:
        pkgsrc/databases/p5-DBI: Makefile distinfo

   Log Message:
   p5-DBI: update to 1.654.

   1.654 - 2026-09-25, H.Merijn Brand & Robert Rothenberg
       * Fix DBI::sql_type_cast on IV/NV (CVE-2026-88815) (reported by Raj)
       * Fix FetchHashKeyName   on IV/NV (CVE-2026-88816) (reported by Raj)
       * Fix provided in META

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Mon Sep 28 07:18:10 UTC 2026

   Modified Files:
        pkgsrc/databases/p5-DBI: distinfo
   Added Files:
        pkgsrc/databases/p5-DBI/patches: patch-DBI.xs

   Log Message:
   p5-DBI: try fixing Darwin build

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Mon Sep 28 07:20:14 UTC 2026

   Modified Files:
        pkgsrc/databases/p5-DBI: distinfo
        pkgsrc/databases/p5-DBI/patches: patch-DBI.xs

   Log Message:
   p5-DBI: use more complete upstream bugfix.


To generate a diff of this commit:
cvs rdiff -u -r1.102 -r1.102.2.1 pkgsrc/databases/p5-DBI/Makefile
cvs rdiff -u -r1.65 -r1.65.2.1 pkgsrc/databases/p5-DBI/distinfo
cvs rdiff -u -r0 -r1.3.2.2 pkgsrc/databases/p5-DBI/patches/patch-DBI.xs

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/databases/p5-DBI/Makefile
diff -u pkgsrc/databases/p5-DBI/Makefile:1.102 pkgsrc/databases/p5-DBI/Makefile:1.102.2.1
--- pkgsrc/databases/p5-DBI/Makefile:1.102      Sun Sep 13 06:54:19 2026
+++ pkgsrc/databases/p5-DBI/Makefile    Tue Oct 20 23:33:58 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.102 2026/09/13 06:54:19 wiz Exp $
+# $NetBSD: Makefile,v 1.102.2.1 2026/10/20 23:33:58 maya Exp $
 
-DISTNAME=      DBI-1.653
+DISTNAME=      DBI-1.654
 PKGNAME=       p5-${DISTNAME}
 CATEGORIES=    databases perl5
 MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=../by-authors/id/H/HM/HMBRAND/}

Index: pkgsrc/databases/p5-DBI/distinfo
diff -u pkgsrc/databases/p5-DBI/distinfo:1.65 pkgsrc/databases/p5-DBI/distinfo:1.65.2.1
--- pkgsrc/databases/p5-DBI/distinfo:1.65       Sun Sep 13 06:54:19 2026
+++ pkgsrc/databases/p5-DBI/distinfo    Tue Oct 20 23:33:58 2026
@@ -1,5 +1,6 @@
-$NetBSD: distinfo,v 1.65 2026/09/13 06:54:19 wiz Exp $
+$NetBSD: distinfo,v 1.65.2.1 2026/10/20 23:33:58 maya Exp $
 
-BLAKE2s (DBI-1.653.tgz) = 333cfd0287753942b3fb343bd545a3b0f79e276bdf4a7dd080138332248b47bc
-SHA512 (DBI-1.653.tgz) = ed646a428df291cc087cf70e313971c66de9352a5094bf826d72d00e72fa5e600032bcccea14a7362a62cea26b9128cad6e4a1e27483d19a0f1d7eb247c3119a
-Size (DBI-1.653.tgz) = 742238 bytes
+BLAKE2s (DBI-1.654.tgz) = 2658263201f753006a4f11d56f47d5c9064e50be473b692cc3ac0540f5a75c97
+SHA512 (DBI-1.654.tgz) = bfacc66e4aa41702161ecdf8e171af6807abcce29d6fe5ce7ac82b5d25b8642393d1f735613f48ff32a095a5b9354a4aa0e30d0fcfac086e3a79ff27c56470c2
+Size (DBI-1.654.tgz) = 742647 bytes
+SHA1 (patch-DBI.xs) = 977240d02cbfe02ac905f894bc9d1c457e5e8fa5

Added files:

Index: pkgsrc/databases/p5-DBI/patches/patch-DBI.xs
diff -u /dev/null pkgsrc/databases/p5-DBI/patches/patch-DBI.xs:1.3.2.2
--- /dev/null   Tue Oct 20 23:33:59 2026
+++ pkgsrc/databases/p5-DBI/patches/patch-DBI.xs        Tue Oct 20 23:33:59 2026
@@ -0,0 +1,25 @@
+$NetBSD$
+
+https://github.com/perl5-dbi/dbi/commit/ff4f1baf0389dfa5e7282e1d8d7423c1b5e06b76
+
+--- DBI.xs.orig        2026-09-10 08:59:53.000000000 +0000
++++ DBI.xs
+@@ -1925,6 +1925,8 @@ sql_type_cast_svpv(pTHX_ SV *sv, int sql_type, U32 fla
+     int cast_ok = 0;
+     int grok_flags;
+     UV uv;
++    STRLEN len;
++    char *p;
+ 
+     /* do nothing for undef (NULL) or non-string values */
+     if (!sv || !SvOK(sv))
+@@ -1957,8 +1959,7 @@ sql_type_cast_svpv(pTHX_ SV *sv, int sql_type, U32 fla
+     /* else no error and sv is untouched */
+     case SQL_NUMERIC:
+         /* based on the code in perl's toke.c */
+-        STRLEN len;
+-        char *p = SvPV(sv, len); /* force stringify, handle magic */
++        p = SvPV(sv, len); /* force stringify, handle magic */
+         uv = 0;
+         grok_flags = grok_number(p, len, &uv);
+         cast_ok = 1;