CVS commit: pkgsrc/math/p5-Spreadsheet-XLSX

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Fri Oct 30 00:36:26 UTC 2026

Modified Files:
        pkgsrc/math/p5-Spreadsheet-XLSX: Makefile distinfo

Log Message:
p5-Spreadsheet-XLSX: update to 0.19.

0.19  2026-10-29

    - Security: replace string eval of number-format conditions with strict
      numeric comparisons; invalid conditions use the fallback format section.
      Prevents arbitrary Perl code execution when parsing crafted XLSX files.
    - Add regression tests for numeric conditions and malicious XLSX formats.


To generate a diff of this commit:
cvs rdiff -u -r1.26 -r1.27 pkgsrc/math/p5-Spreadsheet-XLSX/Makefile
cvs rdiff -u -r1.9 -r1.10 pkgsrc/math/p5-Spreadsheet-XLSX/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/math/p5-Spreadsheet-XLSX/Makefile
diff -u pkgsrc/math/p5-Spreadsheet-XLSX/Makefile:1.26 pkgsrc/math/p5-Spreadsheet-XLSX/Makefile:1.27
--- pkgsrc/math/p5-Spreadsheet-XLSX/Makefile:1.26       Thu Jul 16 19:04:16 2026
+++ pkgsrc/math/p5-Spreadsheet-XLSX/Makefile    Fri Oct 30 00:36:26 2026
@@ -1,11 +1,9 @@
-# $NetBSD: Makefile,v 1.26 2026/07/16 19:04:16 wiz Exp $
-#
+# $NetBSD: Makefile,v 1.27 2026/10/30 00:36:26 wiz Exp $
 
-DISTNAME=      Spreadsheet-XLSX-0.18
+DISTNAME=      Spreadsheet-XLSX-0.19
 PKGNAME=       p5-${DISTNAME}
-PKGREVISION=   3
 CATEGORIES=    math perl5
-MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=Spreadsheet/}
+MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=../../authors/id/A/AS/ASB/}
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
 HOMEPAGE=      https://metacpan.org/release/Spreadsheet-XLSX
@@ -14,6 +12,7 @@ LICENSE=      ${PERL5_LICENSE}
 
 DEPENDS+=      p5-Archive-Zip-[0-9]*:../../archivers/p5-Archive-Zip
 DEPENDS+=      p5-Spreadsheet-ParseExcel-[0-9]*:../../math/p5-Spreadsheet-ParseExcel
+TEST_DEPENDS+= p5-Test-NoWarnings-[0-9]*:../../devel/p5-Test-NoWarnings
 
 WRKSRC=                ${WRKDIR}/${PKGNAME_NOREV:S/p5-//}
 USE_LANGUAGES= # empty

Index: pkgsrc/math/p5-Spreadsheet-XLSX/distinfo
diff -u pkgsrc/math/p5-Spreadsheet-XLSX/distinfo:1.9 pkgsrc/math/p5-Spreadsheet-XLSX/distinfo:1.10
--- pkgsrc/math/p5-Spreadsheet-XLSX/distinfo:1.9        Mon May 27 08:08:10 2024
+++ pkgsrc/math/p5-Spreadsheet-XLSX/distinfo    Fri Oct 30 00:36:26 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.9 2024/05/27 08:08:10 wen Exp $
+$NetBSD: distinfo,v 1.10 2026/10/30 00:36:26 wiz Exp $
 
-BLAKE2s (Spreadsheet-XLSX-0.18.tar.gz) = 3b0613201f863cde72ac469694d6e6f07b0eac797d3ed3aed12387781e013872
-SHA512 (Spreadsheet-XLSX-0.18.tar.gz) = 46dffedce89147407fe55ccb65cf99ac5d5e06eb8d988b7bf3f7a9cf43bec9d96cec1195ef6b7f6ae40c151d31175ded2d959298f3a12f0e4ac1284669515eae
-Size (Spreadsheet-XLSX-0.18.tar.gz) = 80239 bytes
+BLAKE2s (Spreadsheet-XLSX-0.19.tar.gz) = 45077e7b26fcfb351b2d141f369b868cdb7b73900e95b42edb475275ba9f75ac
+SHA512 (Spreadsheet-XLSX-0.19.tar.gz) = add358546006315cb4d25aa842727b3dc4dfdf5cf10ca51fa807adcd1a8a4ec7c445c2aca6d03eba23af0ad7cb860fcf8d16b8f0cc17d78009026f4f59890f52
+Size (Spreadsheet-XLSX-0.19.tar.gz) = 84021 bytes