[Midnightbsd-cvs] [MidnightBSD/mports] 3f63f3: net/p5-URI: update to 5.36 (#800)

Lucas Holt noreply at github.com
Tue Sep 1 11:19:11 EDT 2026


  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 3f63f3a688a3df3cf574898dd2c33fab12cea211
      https://github.com/MidnightBSD/mports/commit/3f63f3a688a3df3cf574898dd2c33fab12cea211
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-09-01 (Tue, 01 Sep 2026)

  Changed paths:
    M net/p5-URI/Makefile
    M net/p5-URI/distinfo
    M net/p5-URI/pkg-plist

  Log Message:
  -----------
  net/p5-URI: update to 5.36 (#800)

Update URI to 5.36 to fix CVE-2026-19953.

URI now normalizes IDNA labels to NFC before Punycode encoding. This
also adds its new runtime dependency, restores the test dependencies,
removes the obsolete Magus test suppression, and updates the plist for
files newly shipped upstream.

Validation:

- BATCH=yes bmake makesum
- BATCH=yes bmake patch
- BATCH=yes bmake test (64 files, 1,019 tests; 1 optional test skipped)
- BATCH=yes bmake clean fake
- BATCH=yes bmake package
- direct CVE-2026-19953 IDNA regression check
- portlint -C (0 fatal errors)
- git diff --check

## Summary by Sourcery

Update the p5-URI port to version 5.36 with the security fix and
refreshed dependencies and packaging metadata.

Bug Fixes:
- Update the URI Perl module to 5.36 to address CVE-2026-19953 through
corrected IDNA label normalization.

Enhancements:
- Restore URI test dependencies and remove the obsolete test
suppression.
- Add the upstream runtime dependency and update packaging metadata for
newly shipped files.

Tests:
- Re-enable the upstream test suite for the updated URI module.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications


More information about the Midnightbsd-cvs mailing list