[From nobody Sat Oct 17 16:39:08 2026 Received: (at 1151096-close) by bugs.debian.org; 17 Oct 2026 15:36:40 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 101; hammy, 150; neutral, 220; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:55296) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xI6Se-000PlM-1P for 1151096-close@bugs.debian.org; Sat, 17 Oct 2026 15:36:40 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xI6Sd-008oQ0-0J for 1151096-close@bugs.debian.org; Sat, 17 Oct 2026 15:36:39 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=tMBwkndlNigPw+tf5ubMLN8VUqxf3bU0DOcHe/HgkQw=; b=FifEK/2v/FJwZA58JE54tx1mLg W8hvpkKxWRVijfLGOMdBxYC5MaxMlxBo6Ktgn+dDEbk7/buU4yJcBeHWaUtDrgj8GeXq9kUKQQcba BCtu5ZoCd2k6gVO8hHJBUQYF6Z4XDkBKnbBNiHB9IXhTCsuXGiCrp3lNA71zJ6aJ1IgYM92PJM8/T oVaPjHpdhNMHDRwmiB8tqT720ANwiLvbNMn/fQjqT4PTPEP02xBy5c7cIEJyo2uC5sPHsUm4wOSG9 HLhEuUKjpu5rgXzDEiREJbcjlN7AdCoEfW7EjJ0TrNjFwjih99oAm2qqLk3OUnp6/QporNKFKUNVT SuKLFfKw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1xI6Sc-0000000BxEa-0xxm; Sat, 17 Oct 2026 15:36:38 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: gregor herrmann <gregoa@debian.org> To: 1151096-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libtext-csv-xs-perl Debian: DAK Debian-Changes: libtext-csv-xs-perl_1.65-1_source.changes Debian-Source: libtext-csv-xs-perl Debian-Version: 1.65-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1151096: fixed in libtext-csv-xs-perl 1.65-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============7215166125793182109==" Message-Id: <E1xI6Sc-0000000BxEa-0xxm@fasolo.debian.org> Date: Sat, 17 Oct 2026 15:36:38 +0000 --===============7215166125793182109== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libtext-csv-xs-perl Source-Version: 1.65-1 Done: gregor herrmann <gregoa@debian.org> We believe that the bug you reported is fixed in the latest version of libtext-csv-xs-perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1151096@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. gregor herrmann <gregoa@debian.org> (supplier of updated libtext-csv-xs-perl = package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 17 Oct 2026 17:13:30 +0200 Source: libtext-csv-xs-perl Architecture: source Version: 1.65-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1151096 Changes: libtext-csv-xs-perl (1.65-1) unstable; urgency=3Dmedium . * Import upstream version 1.65. + parse (): report trailing lone CR, do not store EOF as 0xFF (CVE-2026-110759) + Under allow_whitespace, do not strip beyond field start (CVE-2026-110758) + combine (): decide quoting from the bytes, not the NV flags (CVE-2026-110757) + Flush saved bytes in Combine () (CVE-2026-110756) + Re-use AHEAD with \r instead of copying (CVE-2026-110755) + getline (): free the result array when the parse fails (CVE-2026-110754) + Do not free the bound column scalar in skip_empty_rows (CVE-2026-110753) + fragment (): do not size memory by the selector integers (CVE-2026-110752) Closes: #1151096 * Update upstream email address. * Convert debian/watch to version 5. * Add ITP bug in 0.15-1. Changes-By: lintian-brush * Update upstream metadata fields: Repository, Repository-Browse, Security-Contact. Changes-By: lintian-brush Checksums-Sha1: e4a860cc2a3f6d28818da58c27522d9de14c485d 2638 libtext-csv-xs-perl_1.65-1.dsc a5485850a77b389cad3a27bd395f0e0acc25e9ea 289515 libtext-csv-xs-perl_1.65.ori= g.tar.gz 649485b9a8b7906a8ddee5c33ffd8f8f17056730 8840 libtext-csv-xs-perl_1.65-1.deb= ian.tar.xz 20feb52fda8f04084c7e23c988b9599b372fdacd 626764 libtext-csv-xs-perl_1.65-1.g= it.tar.xz caf4a2e9aaab3302a60b81ee2e507de12fe4d100 17768 libtext-csv-xs-perl_1.65-1_so= urce.buildinfo Checksums-Sha256: ec9c6e7d6b39664d6bb80cf7c71ee5ed09013344babfd1eb004a4752bc4575e8 2638 libtex= t-csv-xs-perl_1.65-1.dsc 4f0c16457c87def295a994e9c4ba397a8baafad96cefaf2d61483125f90ff974 289515 libt= ext-csv-xs-perl_1.65.orig.tar.gz cf64297e08be8de60e482839fb0dbc20e124a9f1452d66ead7ba828228479e2e 8840 libtex= t-csv-xs-perl_1.65-1.debian.tar.xz 1dd2ba960fd7c60fbab976294e07ed4792e8ff11519c69440e731ba97b0a31a6 626764 libt= ext-csv-xs-perl_1.65-1.git.tar.xz 9bb014b32ce4366ca1de286b4b1ab6fa69611b3ac2f2352b0a0ab5264ab9e6b5 17768 libte= xt-csv-xs-perl_1.65-1_source.buildinfo Files: 4a5a24431d7ce224f68f3fe5fe4c158a 2638 perl optional libtext-csv-xs-perl_1.65= -1.dsc abfda9c285a3a5429d0b10c59a948b4d 289515 perl optional libtext-csv-xs-perl_1.= 65.orig.tar.gz ac374c3e36daaa143344f4cc9e0a748f 8840 perl optional libtext-csv-xs-perl_1.65= -1.debian.tar.xz 15f038c162cbcf79aaebaf0df09374ba 626764 perl None libtext-csv-xs-perl_1.65-1= .git.tar.xz aeecf74d543ae21bffc16e4d1ed8a083 17768 perl optional libtext-csv-xs-perl_1.6= 5-1_source.buildinfo Git-Tag-Info: tag=3D915fc7878cd8132d3aa5a3bba96a21bfec8239f6 fp=3Dd1e1316e93a= 760a8104d85fabb3a68018649aa06 Git-Tag-Tagger: gregor herrmann <gregoa@debian.org> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmrTke0ACgkQYG0ITkaD wHkwJRAAihSks63JJCnttTif+knJFTm+qnX7kAajTmgKnDRkzeBDVd0U3YIOp2q0 AjqJanwLLjJJYUPGOY7TtWEMSBpeGEGQb9Vinn5NSQZXDydHwrycRVnSmqzU40Cj 8BgmCHy966ULByJlU7c07w9USEwTs9ob+HcTIWcqS7JSAduHbDayVmXlzKvAsqK7 goI+cFoCC/UzOCTE1dLGudNA253dNL/BdqGn8lkQWby0kVrIA9yQYBrZxm09qNK1 Rd5beFAuzVsOh4tiKKSh7/RLfHu7Kn+m10x92eCEch8TN69YCMxnduzodXfC0pX8 yVZV24ul5apnSo3mkhGHFFzymo0K50iEdMRAV3giWWou1DheQsNMQQz9lRW/5jq2 0kAPWSc0meoZFIoLn+rZc48QTbsLhE6ntAFHcyAgCstjIoVIhaCNXgtkIaiX1LjP zcYYq+ZEsDB3uOMo6HfQB2QQyZruJhC8IEEouP+0GFyPyq/V773SmOpGEYoeJwYD xxoivmAn8XJVgTjhi7Vg9pqQNEMGgM4zCAi53Ayu0kFkJJzQc/TSXkwk6Ihr14Y5 YBwHWKVeEtLBVjmAHwqU+2HekAcgQQQRGbxaWIPzXcfYEJPidw4p421MIRgeoYgp 6TmlhCpHuhc1Gl6HHGMIZ0seX3KUs+LeIbgIKKFYIBvxsf3QCXs=3D =3Dn8sJ -----END PGP SIGNATURE----- --===============7215166125793182109== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCatOWBgAKCRCb9qggYcy5 IbYYAQDsCGa08rZXHeAVrnEfIu+CryYCph2UIiyDrOsT9q2+KAEAhzx0dFv+r2jT QOpSEjv+Txa9gJVU7OLlY8cCi5n6PQs= =rc+N -----END PGP SIGNATURE----- --===============7215166125793182109==-- ]