CVS commit: pkgsrc/converters/p5-JSON-XS

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun Sep 14 06:49:38 UTC 2025

Modified Files:
        pkgsrc/converters/p5-JSON-XS: Makefile distinfo

Log Message:
p5-JSON-XS: update to 4.04.

4.04 Fri 05 Sep 2025 23:59:48 CEST
        - fix heap overflow causing crashes, possibly information
          disclosure or worse (CVE-2025-40928), and causes JSON::XS to
          accept invalid JSON texts as valid in some cases. Thanks to
          Michael Hudak for finding this, the CPAN Security Group for
          coordinating this, and Reini Urban for double-checking the patch
          (and Peter Juhasz for potentially reporting this much earlier).


To generate a diff of this commit:
cvs rdiff -u -r1.45 -r1.46 pkgsrc/converters/p5-JSON-XS/Makefile
cvs rdiff -u -r1.29 -r1.30 pkgsrc/converters/p5-JSON-XS/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/converters/p5-JSON-XS/Makefile
diff -u pkgsrc/converters/p5-JSON-XS/Makefile:1.45 pkgsrc/converters/p5-JSON-XS/Makefile:1.46
--- pkgsrc/converters/p5-JSON-XS/Makefile:1.45  Fri Jul  4 08:44:51 2025
+++ pkgsrc/converters/p5-JSON-XS/Makefile       Sun Sep 14 06:49:38 2025
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.45 2025/07/04 08:44:51 wiz Exp $
+# $NetBSD: Makefile,v 1.46 2025/09/14 06:49:38 wiz Exp $
 
-DISTNAME=      JSON-XS-4.03
+DISTNAME=      JSON-XS-4.04
 PKGNAME=       p5-${DISTNAME}
-PKGREVISION=   5
 CATEGORIES=    converters perl5
 MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=JSON/}
 

Index: pkgsrc/converters/p5-JSON-XS/distinfo
diff -u pkgsrc/converters/p5-JSON-XS/distinfo:1.29 pkgsrc/converters/p5-JSON-XS/distinfo:1.30
--- pkgsrc/converters/p5-JSON-XS/distinfo:1.29  Tue Oct 26 10:06:46 2021
+++ pkgsrc/converters/p5-JSON-XS/distinfo       Sun Sep 14 06:49:38 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.29 2021/10/26 10:06:46 nia Exp $
+$NetBSD: distinfo,v 1.30 2025/09/14 06:49:38 wiz Exp $
 
-BLAKE2s (JSON-XS-4.03.tar.gz) = 690ede4dd813b03fbcd254788c21239b19203b2a9526d4e51422e9da9e8162ac
-SHA512 (JSON-XS-4.03.tar.gz) = 7d2c20302b0f98bd69e692b61d272b58c13a79741f3e2e44ee0530e21dd239526477f8b02e4afbfe41ee83cb69ab1c5247bf0be355f3f09e9cfe31b2ea4a5155
-Size (JSON-XS-4.03.tar.gz) = 86749 bytes
+BLAKE2s (JSON-XS-4.04.tar.gz) = 16110b50157c3baf6b6bda2dc8048cb7114e051b31ee256b8b0aa57410bc9ac3
+SHA512 (JSON-XS-4.04.tar.gz) = 018d02c7db58a8469afd8454c7822602a50d09a1658e41511ae38bc0f0cfe88f180758ae1dc0f1a933869c8e5c1e7535a2e4d312a9d206544df0ccb4cba11295
+Size (JSON-XS-4.04.tar.gz) = 87082 bytes