Index | Thread | Search

From:
Andrew Hewus Fresh <andrew@afresh1.com>
Subject:
[UPDATE] www/p5-Starman to 0.4018
To:
Abel Abraham Camarillo Ojeda <acamari@verlet.org>
Cc:
ports@openbsd.org
Date:
Tue, 28 Apr 2026 17:31:38 -0700

Download raw body.

Thread 
I guess nobody told cpansec that the ports tree is locked.

When it's not.

https://lists.security.metacpan.org/cve-announce/msg/39426182/

https://metacpan.org/dist/Starman/changes
0.4018  2026-04-27 12:29:41 PDT
        - Fix HTTP request smuggling: Transfer-Encoding now takes precedence
          over Content-Length per RFC 7230 ยง3.3.3 (CVE-2026-40560)

Index: Makefile
===================================================================
RCS file: /cvs/ports/www/p5-Starman/Makefile,v
diff -u -p -r1.13 Makefile
--- Makefile	20 Dec 2025 06:52:08 -0000	1.13
+++ Makefile	29 Apr 2026 00:24:19 -0000
@@ -2,7 +2,7 @@ COMMENT =		high-performance preforking P
 
 MODULES =		cpan
 PKG_ARCH =		*
-DISTNAME =		Starman-0.4017
+DISTNAME =		Starman-0.4018
 CATEGORIES =		www
 MAINTAINER =		Abel Abraham Camarillo Ojeda <acamari@verlet.org>
 
Index: distinfo
===================================================================
RCS file: /cvs/ports/www/p5-Starman/distinfo,v
diff -u -p -r1.5 distinfo
--- distinfo	20 Dec 2025 06:52:08 -0000	1.5
+++ distinfo	29 Apr 2026 00:24:19 -0000
@@ -1,2 +1,2 @@
-SHA256 (Starman-0.4017.tar.gz) = b/q5FfMj9gCJ4+v4Urm5cH1pFyZt+K/XNw+sBL/f7k4=
-SIZE (Starman-0.4017.tar.gz) = 32568
+SHA256 (Starman-0.4018.tar.gz) = bY2yl9hRFB+k/3dI3/BVG+K6j5pELtnKrGRNvMmjbt0=
+SIZE (Starman-0.4018.tar.gz) = 33079