-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 17 Oct 2026 17:13:30 +0200 Source: libtext-csv-xs-perl Architecture: source Version: 1.65-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1151096 Changes: libtext-csv-xs-perl (1.65-1) unstable; urgency=medium . * Import upstream version 1.65. + parse (): report trailing lone CR, do not store EOF as 0xFF (CVE-2026-110759) + Under allow_whitespace, do not strip beyond field start (CVE-2026-110758) + combine (): decide quoting from the bytes, not the NV flags (CVE-2026-110757) + Flush saved bytes in Combine () (CVE-2026-110756) + Re-use AHEAD with \r instead of copying (CVE-2026-110755) + getline (): free the result array when the parse fails (CVE-2026-110754) + Do not free the bound column scalar in skip_empty_rows (CVE-2026-110753) + fragment (): do not size memory by the selector integers (CVE-2026-110752) Closes: #1151096 * Update upstream email address. * Convert debian/watch to version 5. * Add ITP bug in 0.15-1. Changes-By: lintian-brush * Update upstream metadata fields: Repository, Repository-Browse, Security-Contact. Changes-By: lintian-brush Checksums-Sha1: e4a860cc2a3f6d28818da58c27522d9de14c485d 2638 libtext-csv-xs-perl_1.65-1.dsc a5485850a77b389cad3a27bd395f0e0acc25e9ea 289515 libtext-csv-xs-perl_1.65.orig.tar.gz 649485b9a8b7906a8ddee5c33ffd8f8f17056730 8840 libtext-csv-xs-perl_1.65-1.debian.tar.xz 20feb52fda8f04084c7e23c988b9599b372fdacd 626764 libtext-csv-xs-perl_1.65-1.git.tar.xz caf4a2e9aaab3302a60b81ee2e507de12fe4d100 17768 libtext-csv-xs-perl_1.65-1_source.buildinfo Checksums-Sha256: ec9c6e7d6b39664d6bb80cf7c71ee5ed09013344babfd1eb004a4752bc4575e8 2638 libtext-csv-xs-perl_1.65-1.dsc 4f0c16457c87def295a994e9c4ba397a8baafad96cefaf2d61483125f90ff974 289515 libtext-csv-xs-perl_1.65.orig.tar.gz cf64297e08be8de60e482839fb0dbc20e124a9f1452d66ead7ba828228479e2e 8840 libtext-csv-xs-perl_1.65-1.debian.tar.xz 1dd2ba960fd7c60fbab976294e07ed4792e8ff11519c69440e731ba97b0a31a6 626764 libtext-csv-xs-perl_1.65-1.git.tar.xz 9bb014b32ce4366ca1de286b4b1ab6fa69611b3ac2f2352b0a0ab5264ab9e6b5 17768 libtext-csv-xs-perl_1.65-1_source.buildinfo Files: 4a5a24431d7ce224f68f3fe5fe4c158a 2638 perl optional libtext-csv-xs-perl_1.65-1.dsc abfda9c285a3a5429d0b10c59a948b4d 289515 perl optional libtext-csv-xs-perl_1.65.orig.tar.gz ac374c3e36daaa143344f4cc9e0a748f 8840 perl optional libtext-csv-xs-perl_1.65-1.debian.tar.xz 15f038c162cbcf79aaebaf0df09374ba 626764 perl None libtext-csv-xs-perl_1.65-1.git.tar.xz aeecf74d543ae21bffc16e4d1ed8a083 17768 perl optional libtext-csv-xs-perl_1.65-1_source.buildinfo Git-Tag-Info: tag=915fc7878cd8132d3aa5a3bba96a21bfec8239f6 fp=d1e1316e93a760a8104d85fabb3a68018649aa06 Git-Tag-Tagger: gregor herrmann <gregoa@debian.org> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmrTke0ACgkQYG0ITkaD wHkwJRAAihSks63JJCnttTif+knJFTm+qnX7kAajTmgKnDRkzeBDVd0U3YIOp2q0 AjqJanwLLjJJYUPGOY7TtWEMSBpeGEGQb9Vinn5NSQZXDydHwrycRVnSmqzU40Cj 8BgmCHy966ULByJlU7c07w9USEwTs9ob+HcTIWcqS7JSAduHbDayVmXlzKvAsqK7 goI+cFoCC/UzOCTE1dLGudNA253dNL/BdqGn8lkQWby0kVrIA9yQYBrZxm09qNK1 Rd5beFAuzVsOh4tiKKSh7/RLfHu7Kn+m10x92eCEch8TN69YCMxnduzodXfC0pX8 yVZV24ul5apnSo3mkhGHFFzymo0K50iEdMRAV3giWWou1DheQsNMQQz9lRW/5jq2 0kAPWSc0meoZFIoLn+rZc48QTbsLhE6ntAFHcyAgCstjIoVIhaCNXgtkIaiX1LjP zcYYq+ZEsDB3uOMo6HfQB2QQyZruJhC8IEEouP+0GFyPyq/V773SmOpGEYoeJwYD xxoivmAn8XJVgTjhi7Vg9pqQNEMGgM4zCAi53Ayu0kFkJJzQc/TSXkwk6Ihr14Y5 YBwHWKVeEtLBVjmAHwqU+2HekAcgQQQRGbxaWIPzXcfYEJPidw4p421MIRgeoYgp 6TmlhCpHuhc1Gl6HHGMIZ0seX3KUs+LeIbgIKKFYIBvxsf3QCXs= =n8sJ -----END PGP SIGNATURE-----
