On Fri, Nov 09, 2007 at 11:31:52AM -0500, George Georgalis wrote:
> I see from my cron test that there is a new version of perl available
> 
> perl-5.8.8nb4 < perl-5.8.8nb5
> 
> I don't see any security advisory so I presume it is a bugfix, but
> where is the change log?


It's a security fix (CVE-2007-5116) and it was added to the pkg-vulnerabilities
database, only the updated version hasn't been signed and uploaded yet by the
pkgsrc-security team.


> A query of my checkout indicates there was a patch committed Nov 7
> and the Makefile and distinfo where updated today.
> 
> ls -rlt `find   /usr/pkgsrc/lang/perl5/ -type f` | tail
> -rw-r--r--  1 root  wheel    304 Oct 11 06:48 /usr/pkgsrc/lang/perl5//files/CVS/Entries
> -rw-r--r--  1 root  wheel     15 Oct 11 06:48 /usr/pkgsrc/lang/perl5//patches/CVS/Tag
> -rw-r--r--  1 root  wheel     36 Oct 11 09:08 /usr/pkgsrc/lang/perl5//patches/CVS/Root
> -rw-r--r--  1 root  wheel     36 Oct 11 09:08 /usr/pkgsrc/lang/perl5//files/CVS/Root
> -rw-r--r--  1 root  wheel     36 Oct 11 09:08 /usr/pkgsrc/lang/perl5//CVS/Root
> -rw-r--r--  1 root  wheel   2168 Nov  7 07:44 /usr/pkgsrc/lang/perl5//patches/patch-da
> -rw-r--r--  1 root  wheel   1542 Nov  9 02:21 /usr/pkgsrc/lang/perl5//distinfo
> -rw-r--r--  1 root  wheel  11669 Nov  9 02:21 /usr/pkgsrc/lang/perl5//Makefile
> -rw-r--r--  1 root  wheel   1220 Nov  9 02:21 /usr/pkgsrc/lang/perl5//patches/CVS/Entries
> -rw-r--r--  1 root  wheel    596 Nov  9 02:23 /usr/pkgsrc/lang/perl5//CVS/Entries
> 
> So, I was wondering if a CHANGES exists anywhere for patch-da,
> and why isn't it in lang/perl5?
> 
> (BTW it seems to address utf8 regex compatibility)


You can view the change log for invididual files via "cvs log", or CVSweb:
http://cvsweb.be.netbsd.org/cgi-bin/cvsweb.cgi/pkgsrc/lang/perl5/

Alternatively you can look at the pkgsrc commit mails:
http://mail-index.netbsd.org/pkgsrc-changes/
You can subscribe to that list if you wish to track changes closely.

Hope that helps,


	Geert