- Upgrade to 0.73.9cc41ca96e
Text::CSV_XS -- multiple vulnerabilitiesentered 2026-10-16
CVE-2026-110752, CVE-2026-110753, CVE-2026-110754, CVE-2026-110755, CVE-2026-110756, CVE-2026-110757, CVE-2026-110758, CVE-2026-110759
Comma-separated values manipulation routines
# pkg install p5-Text-CSV_XSinstalls 1.65 from latest; from quarterly (2026Q4) 1.65# cd /usr/ports/textproc/p5-Text-CSV_XS && make install clean| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.65 | 1.64 | – |
| FreeBSD 15 | 1.65 | 1.65 | – |
| FreeBSD 14 | 1.65 | 1.64 | 1.65 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.65 | 1.65 | – |
| FreeBSD 14 | 1.65 | 1.64 | 1.65 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 1.65.| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-110759 | 9.8 | 2026-10-16 | Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse. When the input to parse e… |
| CVE-2026-110757 | 9.8 | 2026-10-16 | Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combine. combine and print do not check whether a… |
| CVE-2026-110756 | 9.8 | 2026-10-16 | Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field precedes invalid UTF-8 bytes in print. When a record … |
| CVE-2026-110753 | 9.8 | 2026-10-16 | Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline. With bind_colu… |
| CVE-2026-110758 | 7.5 | 2026-10-16 | Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace. Under allow_whitespace, strip_t… |
| CVE-2026-110755 | 7.5 | 2026-10-16 | Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getline. With eol unset, the default… |
| CVE-2026-110752 | 7.5 | 2026-10-16 | Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment. fragment expands a row= or col… |
| CVE-2026-110754 | 6.5 | 2026-10-16 | Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline. getline collects the fields of a record into a new array a… |
CVE-2026-110752, CVE-2026-110753, CVE-2026-110754, CVE-2026-110755, CVE-2026-110756, CVE-2026-110757, CVE-2026-110758, CVE-2026-110759
- Upgrade to 0.73.9cc41ca96e
- Upgrade to 0.72.0f5774582c
- Upgrade to 0.71.9aa537f06d
- Upgrade to 0.70.938df85988
- Upgrade to 0.69.3c938d741c
Upgrade to 0.68.ad6fa249c2
Upgrade to 0.67.c025808f01
- Take maintainership which I'm using.8c2577b3f0
Drop my maintainershipb9d412e6fa
- Update to 0.65 PR: ports/136564 Approved by: maintainer timeout (ache; 14 days) Submitted by: myself (pgollucci@)eddff9317c
Upgrade to 0.63 PR: 132973 Submitted by: Edmondas Girkantas <eg@fbsd.lt>1405c20b95
Upgrade to 0.6060206b373b
Update to 0.54 PR: 127140 Submitted by: Yen-Ming Lee <leeym@freebsd.org>2ad3bf9db3
Upgrade to 0.45 PR: 124001 Submitted by: Martin Kjeldsen <mk@catpipe.net>b095f3917b
Update to 0.34 With minor mod to pkg-plist comparing to original PR PR: 120887 Submitted by: leeym5c4987423a
SHA256ify Approved by: krion@84b1517c16
big whitespace cleanup (see ports/65409) PR: ports/65828 Submitted by: trevor Approved by: achec170f04e0f
Add size data, approved by maintainers.a1bc8c46f5
utilize SITE_PERL PR: 58166 Submitted by: Cheng-Lung Sung <clsung@dragon2.net>c634b4bb83
Clear moonlight beckons. Requiem mors pacem pkg-comment, And be calm ports tree. E Nomini Patri, E Fili, E Spiritu Sancti.7e52725f2a
Upgrade to 0.23a944738adb
Upgrade to 0.22.107a4f2f14
Remove do-configure section, use PERL_CONFIGURE now.68c2f99c63
Massive style enforcement - use ^I instead of spaces for variables identation.2b1a883dc4
Lots and lots of cleanups. Teach p5-* in general about PKGNAMEPREFIX. Add some missing/wrong dependencies. Show how to respect CC/CFLAGS. Many miscellaneous modifications. I used more excessive hacks to force p5-Jcode and p5-WWW-Search to respect CC/CFLAGS. Patches largely done by: Christian Weisgerber <naddy@mips.inka.de>1e60866cc1
Update with the new PORTNAME/PORTVERSION variables37c0ef8e3b
fix pathbc35359a12
General comment cleanups.8cd82c0318
Comma separated values manipulations2beeebeda2