CVS commit: [pkgsrc-2026Q2] pkgsrc/databases/p5-DBI

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Thu Jul 16 14:13:21 UTC 2026

Modified Files:
        pkgsrc/databases/p5-DBI [pkgsrc-2026Q2]: Makefile distinfo

Log Message:
Pullup ticket #7175 - requested by taca
databases/p5-DBI: Security fix

Revisions pulled up:
- databases/p5-DBI/Makefile                                     1.97-1.99
- databases/p5-DBI/distinfo                                     1.61-1.63

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Sun Jun 28 06:19:22 UTC 2026

   Modified Files:
        pkgsrc/databases/p5-DBI: Makefile distinfo

   Log Message:
   p5-DBI: update to 1.649.

   1.649 - 2026-06-22, H.Merijn Brand
       * Extra Cwd::abs_path required for Windows

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Wed Jul  8 07:47:47 UTC 2026

   Modified Files:
        pkgsrc/databases/p5-DBI: Makefile distinfo

   Log Message:
   p5-DBI: update to 1.650.

   1.650 - 2026-07-06, H.Merijn Brand & Robert Rothenberg
       * Set a hard limit of 99999 on '?' placeholders (CVE-2026-14739)
       * Fix out-of-bounds read in preparse of SQL that starts with a comment (CVE-2026-14740)
       * Fix code injection via Profile DSN attribute or DBI_PROFILE variable (CVE-2026-14380)
       * Update dbipport.h to Devel::PPPort-3.73
       * Require Test::More 0.96 (tests will otherwise fail on pristine perl-5.12)

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Tue Jul 14 16:51:25 UTC 2026

   Modified Files:
        pkgsrc/databases/p5-DBI: Makefile distinfo

   Log Message:
   p5-DBI: update to 1.651.

   1.651 - 2026-07-14, H.Merijn Brand & Robert Rothenberg
       * Fix inverted comparisons for strings in DBI::SQL::Nano  (CVE-2026-15043)
       * Document that IS NULL matches empty strings in DBI::SQL::Nano
       * Fix DBD::File to ensure that the table is not a symlink outside of f_dir (CVE-2026-15392)
       * Fix an out-of-bounds error when a statement handle has no fields but the source row is not empty (CVE-2026-60082)
       * Add an overridable upper bound $MAX_PATH_DEPTH for DBI::ProfileData (CVE-2026-60081)
       * *** WARNING: Next release will require perl-5.12 ***


To generate a diff of this commit:
cvs rdiff -u -r1.96 -r1.96.2.1 pkgsrc/databases/p5-DBI/Makefile
cvs rdiff -u -r1.60 -r1.60.2.1 pkgsrc/databases/p5-DBI/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/databases/p5-DBI/Makefile
diff -u pkgsrc/databases/p5-DBI/Makefile:1.96 pkgsrc/databases/p5-DBI/Makefile:1.96.2.1
--- pkgsrc/databases/p5-DBI/Makefile:1.96       Sat Jun  6 18:27:35 2026
+++ pkgsrc/databases/p5-DBI/Makefile    Thu Jul 16 14:13:21 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.96 2026/06/06 18:27:35 wiz Exp $
+# $NetBSD: Makefile,v 1.96.2.1 2026/07/16 14:13:21 maya Exp $
 
-DISTNAME=      DBI-1.648
+DISTNAME=      DBI-1.651
 PKGNAME=       p5-${DISTNAME}
 CATEGORIES=    databases perl5
 MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=../by-authors/id/H/HM/HMBRAND/}

Index: pkgsrc/databases/p5-DBI/distinfo
diff -u pkgsrc/databases/p5-DBI/distinfo:1.60 pkgsrc/databases/p5-DBI/distinfo:1.60.2.1
--- pkgsrc/databases/p5-DBI/distinfo:1.60       Sat Jun  6 18:27:35 2026
+++ pkgsrc/databases/p5-DBI/distinfo    Thu Jul 16 14:13:21 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.60 2026/06/06 18:27:35 wiz Exp $
+$NetBSD: distinfo,v 1.60.2.1 2026/07/16 14:13:21 maya Exp $
 
-BLAKE2s (DBI-1.648.tgz) = e411fa1cefa81ff6b98d21ad33a0183d43e87ed4060d326ef47ba076b9d599f5
-SHA512 (DBI-1.648.tgz) = ac4d6cf3fafd0e0f3f73c71242ac431b2a6273b28d8ff69704805dae5a1690a6b2cd66df3b91085286ccc3fdbe97bb7c533d66e3fe7b4d705e5fca5a9601dab9
-Size (DBI-1.648.tgz) = 729471 bytes
+BLAKE2s (DBI-1.651.tgz) = 2fb1bc0348a81221af69a09573e5e660f1b11451c943d05598d60b5d12c8df9b
+SHA512 (DBI-1.651.tgz) = 551ec29b88055a0c5380ba3a23105f33d64ab66a24833e6174e793d97583650719b50304255de54f967fac72f61e06cf0976483caaa340b6e725f6f45bfc24ba
+Size (DBI-1.651.tgz) = 735244 bytes