CVS commit: pkgsrc/textproc/p5-XML-Bare

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Thu Jul 16 17:46:07 UTC 2026

Modified Files:
        pkgsrc/textproc/p5-XML-Bare: Makefile distinfo

Log Message:
p5-XML-Bare: fix CVE-2026-13401

using upstream patch

Bump PKGREVISION.


To generate a diff of this commit:
cvs rdiff -u -r1.21 -r1.22 pkgsrc/textproc/p5-XML-Bare/Makefile
cvs rdiff -u -r1.7 -r1.8 pkgsrc/textproc/p5-XML-Bare/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/textproc/p5-XML-Bare/Makefile
diff -u pkgsrc/textproc/p5-XML-Bare/Makefile:1.21 pkgsrc/textproc/p5-XML-Bare/Makefile:1.22
--- pkgsrc/textproc/p5-XML-Bare/Makefile:1.21   Fri Jul  4 08:48:36 2025
+++ pkgsrc/textproc/p5-XML-Bare/Makefile        Thu Jul 16 17:46:06 2026
@@ -1,12 +1,15 @@
-# $NetBSD: Makefile,v 1.21 2025/07/04 08:48:36 wiz Exp $
-#
+# $NetBSD: Makefile,v 1.22 2026/07/16 17:46:06 wiz Exp $
 
 DISTNAME=      XML-Bare-0.53
 PKGNAME=       p5-${DISTNAME}
-PKGREVISION=   13
+PKGREVISION=   14
 CATEGORIES=    textproc
 MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=XML/}
 
+PATCHFILES+=           CVE-2026-13401-r1.patch
+PATCH_SITES+=          https://security.metacpan.org/patches/X/XML-Bare/0.53/
+PATCH_DIST_STRIP=      -p1
+
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
 HOMEPAGE=      https://metacpan.org/release/XML-Bare
 COMMENT=       Minimal XML parser implemented via a C state engine

Index: pkgsrc/textproc/p5-XML-Bare/distinfo
diff -u pkgsrc/textproc/p5-XML-Bare/distinfo:1.7 pkgsrc/textproc/p5-XML-Bare/distinfo:1.8
--- pkgsrc/textproc/p5-XML-Bare/distinfo:1.7    Wed Jul  2 03:52:04 2025
+++ pkgsrc/textproc/p5-XML-Bare/distinfo        Thu Jul 16 17:46:06 2026
@@ -1,5 +1,8 @@
-$NetBSD: distinfo,v 1.7 2025/07/02 03:52:04 markd Exp $
+$NetBSD: distinfo,v 1.8 2026/07/16 17:46:06 wiz Exp $
 
+BLAKE2s (CVE-2026-13401-r1.patch) = d134f846cc289f09e61e1687f36ee53dafd30638009c1ac03631e965362ae00c
+SHA512 (CVE-2026-13401-r1.patch) = 0eed32c9341044d3a01d386fb4eb43a4036925a4a21dfb043d1ee7c236d5b2cc416f3ed16dfe6b6ba88def252117750615686762c238fc51a9a360363c93e251
+Size (CVE-2026-13401-r1.patch) = 1133 bytes
 BLAKE2s (XML-Bare-0.53.tar.gz) = 7b9268f4740cc23c3f1a4059b3ae77d4a883fcba2540c41835aa001a3f5a952e
 SHA512 (XML-Bare-0.53.tar.gz) = e765206e5c98ed3a0c29be3a323e25beaa712489d0461e2e7269f5f3383fa805ba3829a9ed4d31cd86f35400c321f8cf519162cc41f52f8ba6992c7016f63520
 Size (XML-Bare-0.53.tar.gz) = 79278 bytes