[From nobody Thu May  7 10:49:07 2026
Received: (at 1135232-close) by bugs.debian.org; 7 May 2026 09:47:09 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-113.0 required=4.0 tests=BAYES_00,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD,
 HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,
 SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham
 autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 81; hammy, 150; neutral, 133; spammy,
 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK,
 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz,
 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo
Return-path: &lt;envelope@ftp-master.debian.org&gt;
Received: from mitropoulos.debian.org
 ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:58072)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1wKvK1-00FGcH-0B for 1135232-close@bugs.debian.org;
 Thu, 07 May 2026 09:47:09 +0000
Received: via submission
 from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA,
 CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified)
 by mitropoulos.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1wKvJz-0066dX-0G for 1135232-close@bugs.debian.org;
 Thu, 07 May 2026 09:47:07 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type:
 Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID
 :Content-Description:In-Reply-To:References;
 bh=0XOeN6sOTVznYpnF7AA6GHa2OkPvs04lda7DCV5XEJk=; b=OhBgGaKcroZE/xbV2/r6Vre00A
 RkrRHk3Di7US1o2GggkfnggVbsZlI8NseyaFiwWmxR9amDvnDllPEaHSljhLT4JPnJ0BNKbuFGLgx
 WAqiAc6kw5QguZuFege+WlYzmD7U665ALrFioGYedrjf+I0ZxA1v6erNaSGS+CirP3mfV9jvxgHOH
 jfDMfZA6zO+CT+EmMl/8rIWOTwT2Y9PGqNkyZi9uv0j7/8h//H7zieFwCGD8bZ3xYvrtVD+vjG+W7
 VQKDGeFD58R24Jjv6LXjZn2ms41uKXy4ge8rILLOzwyFDIxbSEiN+TD/DI3v0E2thklR9u3RFJpgk
 6pL5n+AQ==;
Received: from dak by fasolo.debian.org with local (Exim 4.98.2)
 (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1wKvJx-0000000CCEJ-3c7k; Thu, 07 May 2026 09:47:05 +0000
From: Debian FTP Masters &lt;ftpmaster@ftp-master.debian.org&gt;
Reply-To: gregor herrmann &lt;gregoa@debian.org&gt;
To: 1135232-close@bugs.debian.org
X-DAK: dak process-policy
X-Debian: DAK
X-Debian-Package: libtext-csv-xs-perl
Debian: DAK
Debian-Changes: libtext-csv-xs-perl_1.60-1+deb13u1_source.changes
Debian-Source: libtext-csv-xs-perl
Debian-Version: 1.60-1+deb13u1
Debian-Architecture: source
Debian-Suite: proposed-updates
Debian-Archive-Action: accept
MIME-Version: 1.0
Subject: Bug#1135232: fixed in libtext-csv-xs-perl 1.60-1+deb13u1
Content-Type: multipart/signed; micalg=&quot;pgp-sha256&quot;;
 protocol=&quot;application/pgp-signature&quot;;
 boundary=&quot;===============6124353363511846138==&quot;
Message-Id: &lt;E1wKvJx-0000000CCEJ-3c7k@fasolo.debian.org&gt;
Date: Thu, 07 May 2026 09:47:05 +0000

--===============6124353363511846138==
Content-Type: text/plain; charset=&quot;utf-8&quot;
Content-Transfer-Encoding: quoted-printable

Source: libtext-csv-xs-perl
Source-Version: 1.60-1+deb13u1
Done: gregor herrmann &lt;gregoa@debian.org&gt;

We believe that the bug you reported is fixed in the latest version of
libtext-csv-xs-perl, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1135232@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
gregor herrmann &lt;gregoa@debian.org&gt; (supplier of updated libtext-csv-xs-perl =
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 06 May 2026 17:02:23 +0200
Source: libtext-csv-xs-perl
Architecture: source
Version: 1.60-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian Perl Group &lt;pkg-perl-maintainers@lists.alioth.debian.org&gt;
Changed-By: gregor herrmann &lt;gregoa@debian.org&gt;
Closes: 1135232
Changes:
 libtext-csv-xs-perl (1.60-1+deb13u1) trixie; urgency=3Dmedium
 .
   * Fix possible stack corruption: CVE-2026-7111.
     Patch taken from upstream Git commit, as released in 1.62.
     (Closes: #1135232)
Checksums-Sha1:
 a77be6cb2e44f70c11b4b53de232b93390a8065c 2653 libtext-csv-xs-perl_1.60-1+deb=
13u1.dsc
 36a9aa1cf9a2488123c6d0682a5c9cfa34a9fd98 9728 libtext-csv-xs-perl_1.60-1+deb=
13u1.debian.tar.xz
Checksums-Sha256:
 1a3f021227a9e4178c480325e9b6424b7aa6aad2df0232e440b4f4e14c658e8a 2653 libtex=
t-csv-xs-perl_1.60-1+deb13u1.dsc
 9c0f5a7a88f7e26e629abdd01daac03200e6f48c3bc918ec9f52256d413c0462 9728 libtex=
t-csv-xs-perl_1.60-1+deb13u1.debian.tar.xz
Files:
 2daa2ee5d88a9f214d8a6f6f15e2b0fb 2653 perl optional libtext-csv-xs-perl_1.60=
-1+deb13u1.dsc
 bd59394d58f5007915a6b54a6ae5707e 9728 perl optional libtext-csv-xs-perl_1.60=
-1+deb13u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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3D
=3DhYzp
-----END PGP SIGNATURE-----


--===============6124353363511846138==
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCafxfmQAKCRCb9qggYcy5
IVV+AP9z0u3qVjV1IkN5WKI/nrXdqAHWIE1R7KhEcPRWVy7hkQEAyLo2E8SUnLCP
Rd5GxMpX/A4Q7+7G0Hu877Eh0g6DlA4=
=AjUd
-----END PGP SIGNATURE-----

--===============6124353363511846138==--
]