CVS commit: [pkgsrc-2026Q2] pkgsrc/www/p5-HTTP-Date

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Thu Jul 16 14:25:55 UTC 2026

Modified Files:
        pkgsrc/www/p5-HTTP-Date [pkgsrc-2026Q2]: Makefile distinfo

Log Message:
Pullup ticket #7180 - requested by taca
www/p5-HTTP-Date: Security fix

Revisions pulled up:
- www/p5-HTTP-Date/Makefile                                     1.25-1.26
- www/p5-HTTP-Date/distinfo                                     1.8-1.9

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Sun Jun 28 06:21:36 UTC 2026

   Modified Files:
        pkgsrc/www/p5-HTTP-Date: Makefile distinfo

   Log Message:
   p5-HTTP-Date: update to 6.07.

   6.07      2026-06-25 15:12:09Z

       - Add test with Time::Zone (GH#25) (Michal Josef =A9pa=E8ek)
       - Add test with bad Time::Zone string (GH#26) (Michal Josef =A9pa=E8=
   ek)
       - Add tests with negative time (GH#26) (Michal Josef =A9pa=E8ek)
       - Replace all instances of \d with [0-9] in regular expressions to
         reject non-ASCII Unicode digits, with a regression test (GH#27)
         (Robert Rothenberg)
       - Reject malformed ISO 8601 timezones with a doubled colon (GH#31)
         (Olaf Alders)
       - Document day/month/year ordering for numeric dates (GH#32) (Olaf
         Alders)

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Sun Jul 12 20:02:22 UTC 2026

   Modified Files:
        pkgsrc/www/p5-HTTP-Date: Makefile distinfo

   Log Message:
   p5-HTTP-Date: update to 6.08.

   6.08      2026-07-09 02:04:21Z

       - [SECURITY] Reject input longer than 64 characters in parse_date()=

         to prevent quadratic regex backtracking (a denial of service) on
         hostile date strings. Fixes CVE-2026-14741. (Olaf Alders)


To generate a diff of this commit:
cvs rdiff -u -r1.24 -r1.24.8.1 pkgsrc/www/p5-HTTP-Date/Makefile
cvs rdiff -u -r1.7 -r1.7.22.1 pkgsrc/www/p5-HTTP-Date/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/p5-HTTP-Date/Makefile
diff -u pkgsrc/www/p5-HTTP-Date/Makefile:1.24 pkgsrc/www/p5-HTTP-Date/Makefile:1.24.8.1
--- pkgsrc/www/p5-HTTP-Date/Makefile:1.24       Fri Jul  4 08:49:15 2025
+++ pkgsrc/www/p5-HTTP-Date/Makefile    Thu Jul 16 14:25:55 2026
@@ -1,16 +1,17 @@
-# $NetBSD: Makefile,v 1.24 2025/07/04 08:49:15 wiz Exp $
+# $NetBSD: Makefile,v 1.24.8.1 2026/07/16 14:25:55 maya Exp $
 
-DISTNAME=      HTTP-Date-6.06
+DISTNAME=      HTTP-Date-6.08
 PKGNAME=       p5-${DISTNAME}
-PKGREVISION=   2
 CATEGORIES=    www perl5
-MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=HTTP/}
+MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=../../authors/id/O/OA/OALDERS/}
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
 HOMEPAGE=      https://metacpan.org/release/HTTP-Date
 COMMENT=       Perl 5 module providing date conversion routines
 LICENSE=       ${PERL5_LICENSE}
 
+DEPENDS+=      p5-TimeDate-[0-9]*:../../time/p5-TimeDate
+
 CONFLICTS+=    p5-libwww<6.00
 
 USE_LANGUAGES= # empty

Index: pkgsrc/www/p5-HTTP-Date/distinfo
diff -u pkgsrc/www/p5-HTTP-Date/distinfo:1.7 pkgsrc/www/p5-HTTP-Date/distinfo:1.7.22.1
--- pkgsrc/www/p5-HTTP-Date/distinfo:1.7        Sun Oct 22 10:53:48 2023
+++ pkgsrc/www/p5-HTTP-Date/distinfo    Thu Jul 16 14:25:55 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.7 2023/10/22 10:53:48 wen Exp $
+$NetBSD: distinfo,v 1.7.22.1 2026/07/16 14:25:55 maya Exp $
 
-BLAKE2s (HTTP-Date-6.06.tar.gz) = ac979ec9cb4fc0dd81f520a77b7a2a80b755fd2ba58c484f0c4e638151bb5105
-SHA512 (HTTP-Date-6.06.tar.gz) = e1555a9b5dff3b2041594f9b480f12a022eb03b0f1628f884fc88a3aed687ba7a6c7d743198c4ca7ba32df22a98fd070bd4a2bc2494703ec72e16303c9cfb3e6
-Size (HTTP-Date-6.06.tar.gz) = 31629 bytes
+BLAKE2s (HTTP-Date-6.08.tar.gz) = 5b8284302728fe674db2fe545915cf1acffd2b943b5a59e8c0c8c84a9292fb6b
+SHA512 (HTTP-Date-6.08.tar.gz) = b8b0f6e5dc09fd3f46ec8da0c739cbdde65224a037ceda67384f8361ed9065ccfb798c88c6615430577dc74c51001735c2019b81a5bacb3310fcd301ad636040
+Size (HTTP-Date-6.08.tar.gz) = 35415 bytes