CVS commit: [pkgsrc-2026Q3] pkgsrc/mail/p5-Email-Sender

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Tue Oct 20 23:39:40 UTC 2026

Modified Files:
        pkgsrc/mail/p5-Email-Sender [pkgsrc-2026Q3]: Makefile distinfo

Log Message:
Pullup ticket #7283 - requested by taca
mail/p5-Email-Sender: Security fix

Revisions pulled up:
- mail/p5-Email-Sender/Makefile                                 1.46-1.47
- mail/p5-Email-Sender/distinfo                                 1.24-1.25

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Mon Sep 21 17:39:09 UTC 2026

   Modified Files:
        pkgsrc/mail/p5-Email-Sender: Makefile distinfo

   Log Message:
   p5-Email-Sender: update to 2.602.

   Security fix release.

   2.602     2026-09-21 11:09:22-04:00 America/New_York
           - SECURITY: the Sendmail transport built a shell command line on Win32,
             so an envelope address containing shell metacharacters -- which can
             come from the To, Cc, or From header of a message sent with
             Email::Sender::Simple -- could execute arbitrary commands.  On Win32,
             envelope addresses are now checked against a conservative pattern, and
             anything else is now rejected with a permanent failure.
             This is CVE-2026-84344.

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Sun Sep 27 09:54:35 UTC 2026

   Modified Files:
        pkgsrc/mail/p5-Email-Sender: Makefile distinfo

   Log Message:
   p5-Email-Sender: update to 2.603.

   2.603     2026-09-21 11:24:06-04:00 America/New_York
           - Just re-issued to correct the CVE identifier for the issue fixed in
             2.602:  it is CVE-2026-93012.


To generate a diff of this commit:
cvs rdiff -u -r1.45 -r1.45.2.1 pkgsrc/mail/p5-Email-Sender/Makefile
cvs rdiff -u -r1.23 -r1.23.22.1 pkgsrc/mail/p5-Email-Sender/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/p5-Email-Sender/Makefile
diff -u pkgsrc/mail/p5-Email-Sender/Makefile:1.45 pkgsrc/mail/p5-Email-Sender/Makefile:1.45.2.1
--- pkgsrc/mail/p5-Email-Sender/Makefile:1.45   Thu Jul 16 19:04:03 2026
+++ pkgsrc/mail/p5-Email-Sender/Makefile        Tue Oct 20 23:39:40 2026
@@ -1,10 +1,9 @@
-# $NetBSD: Makefile,v 1.45 2026/07/16 19:04:03 wiz Exp $
+# $NetBSD: Makefile,v 1.45.2.1 2026/10/20 23:39:40 maya Exp $
 
-DISTNAME=      Email-Sender-2.601
+DISTNAME=      Email-Sender-2.603
 PKGNAME=       p5-${DISTNAME}
-PKGREVISION=   3
 CATEGORIES=    mail perl5
-MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=Email/}
+MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=../../authors/id/R/RJ/RJBS/}
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
 HOMEPAGE=      https://metacpan.org/release/Email-Sender
@@ -22,9 +21,7 @@ DEPENDS+=     p5-Try-Tiny-[0-9]*:../../devel
 DEPENDS+=      p5-MooX-Types-MooseLike>=0.15:../../devel/p5-MooX-Types-MooseLike
 DEPENDS+=      p5-Module-Runtime>=0:../../devel/p5-Module-Runtime
 DEPENDS+=      p5-Sub-Exporter>=0:../../devel/p5-Sub-Exporter
-
-# for make test
-TOOL_DEPENDS+= p5-Capture-Tiny>=0.08:../../devel/p5-Capture-Tiny
+TEST_DEPENDS+= p5-Capture-Tiny>=0.08:../../devel/p5-Capture-Tiny
 
 PERL5_PACKLIST=        auto/Email/Sender/.packlist
 

Index: pkgsrc/mail/p5-Email-Sender/distinfo
diff -u pkgsrc/mail/p5-Email-Sender/distinfo:1.23 pkgsrc/mail/p5-Email-Sender/distinfo:1.23.22.1
--- pkgsrc/mail/p5-Email-Sender/distinfo:1.23   Sun Jan 28 11:45:15 2024
+++ pkgsrc/mail/p5-Email-Sender/distinfo        Tue Oct 20 23:39:40 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.23 2024/01/28 11:45:15 wiz Exp $
+$NetBSD: distinfo,v 1.23.22.1 2026/10/20 23:39:40 maya Exp $
 
-BLAKE2s (Email-Sender-2.601.tar.gz) = 565870a58ec47d8c0886a9fff1410b2c9ff17e2e03976cb5c337738c9b791731
-SHA512 (Email-Sender-2.601.tar.gz) = ca349761607d4693eaac77c8f385799dffa3713dee642ca81271f377421c44d4b1712f16bc2834204d28448addb97576cbf50c8f28681e24940c691d6208b05a
-Size (Email-Sender-2.601.tar.gz) = 53312 bytes
+BLAKE2s (Email-Sender-2.603.tar.gz) = e24bdb24b4efce417ec838e0e95c5ae1eaf75df814cfb90647790253739a8d0d
+SHA512 (Email-Sender-2.603.tar.gz) = 0bcf93126dea4d43dac9ec43421d55fb9f01405321327f819421f4976d638a2c94c73c40690d580a87cd931cb9aaaaceb3023ed09f6b961d1d3127703c942664
+Size (Email-Sender-2.603.tar.gz) = 56937 bytes