-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 25 Jun 2026 14:54:17 +0200
Source: libtext-csv-xs-perl
Architecture: source
Version: 1.49-1+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Closes: 1135232
Changes:
 libtext-csv-xs-perl (1.49-1+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * Fix CVE-2026-7111: Use-after-free when registered callbacks extend the
     Perl argument stack. (Closes: #1135232)
Checksums-Sha1:
 73f7b45d69955b4462888d96d0147439c7292f68 2394 libtext-csv-xs-perl_1.49-1+deb12u1.dsc
 a02e0acc3c2cbc7be11840ec5afb25db7bdd927f 271084 libtext-csv-xs-perl_1.49.orig.tar.gz
 625dccfecb3c89abb60523fee96bf4ba43dec21b 10788 libtext-csv-xs-perl_1.49-1+deb12u1.debian.tar.xz
 db44cb7d3276136f3d70d79628ba29420312dbd9 5955 libtext-csv-xs-perl_1.49-1+deb12u1_source.buildinfo
Checksums-Sha256:
 6a1e600cae318f5fb8f2b1e3c2cdc026035878cdc1f23ca4f91807718f1dace3 2394 libtext-csv-xs-perl_1.49-1+deb12u1.dsc
 796dd0b57d37aabc9246f980ec358a2005341c791cf9f21ea7f0e0fbcf250e67 271084 libtext-csv-xs-perl_1.49.orig.tar.gz
 d8581552bc7848e08db0f0a79be7414ed18360e497c9453a432a5cb579c1e391 10788 libtext-csv-xs-perl_1.49-1+deb12u1.debian.tar.xz
 5a35270e8da376d279849c1aa78ed0d614a048ea3a16d995eef013ea0ebbe338 5955 libtext-csv-xs-perl_1.49-1+deb12u1_source.buildinfo
Files:
 ab7aba529e2a744b69e108fc4d527258 2394 perl optional libtext-csv-xs-perl_1.49-1+deb12u1.dsc
 479d31e37a1282966d3bd47506fb2dcd 271084 perl optional libtext-csv-xs-perl_1.49.orig.tar.gz
 f782de575412f5e9107524585494e3ea 10788 perl optional libtext-csv-xs-perl_1.49-1+deb12u1.debian.tar.xz
 5aa7e245c493e4132ef83c6a213eafb2 5955 perl optional libtext-csv-xs-perl_1.49-1+deb12u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=P3X3
-----END PGP SIGNATURE-----