CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2026/10/16 17:40:46
Modified files:
textproc/p5-Text-CSV_XS: Makefile distinfo
Log message:
Update p5-Text-CSV_XS to 1.65
Several CVE fixes:
* parse (): report trailing lone CR, do not store EOF as 0xFF (CVE-2026-110759)
* Under allow_whitespace, do not strip beyond field start (CVE-2026-110758)
* combine (): decide quoting from the bytes, not the NV flags (CVE-2026-110757)
* Flush saved bytes in Combine () (CVE-2026-110756)
* Re-use AHEAD with \r instead of copying (CVE-2026-110755)
* getline (): free the result array when the parse fails (CVE-2026-110754)
* Do not free the bound column scalar in skip_empty_rows (CVE-2026-110753)
* fragment (): do not size memory by the selector integers (CVE-2026-110752)
