-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 21 Mar 2026 19:13:45 +0100
Source: libyaml-syck-perl
Binary: libyaml-syck-perl libyaml-syck-perl-dbgsym
Architecture: riscv64
Version: 1.34-2+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-manda-03) <buildd_riscv64-rv-manda-03@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libyaml-syck-perl - Perl module providing a fast, lightweight YAML loader and dumper
Changes:
 libyaml-syck-perl (1.34-2+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * fix: address all 4 C-layer audit findings from issue #67 (CVE-2026-4177)
Checksums-Sha1:
 1c7d0f1fec41d109cf98b67a3ef6c294dea82c0a 158548 libyaml-syck-perl-dbgsym_1.34-2+deb13u2_riscv64.deb
 9662becba145c7974c7ab9f30182d032d5fff766 5918 libyaml-syck-perl_1.34-2+deb13u2_riscv64-buildd.buildinfo
 e69ecd4165c6caae9852988b332488734c143290 80268 libyaml-syck-perl_1.34-2+deb13u2_riscv64.deb
Checksums-Sha256:
 96fa5c076b26fec1498ce2532ea59654b34d978c6890791fd8506ad2711bdfed 158548 libyaml-syck-perl-dbgsym_1.34-2+deb13u2_riscv64.deb
 bb975245ae61d5ed9d5a60abfb29f69123fd39bd0113e3f2be712f109cefa747 5918 libyaml-syck-perl_1.34-2+deb13u2_riscv64-buildd.buildinfo
 f890049941b0ed9a30df0cfd2d7c19faea60a139378a2b9d7c64bd076a620c8c 80268 libyaml-syck-perl_1.34-2+deb13u2_riscv64.deb
Files:
 942ac89d09214fb26e98e1684c5fe7ac 158548 debug optional libyaml-syck-perl-dbgsym_1.34-2+deb13u2_riscv64.deb
 871ef35bacee955b882184ee86161a90 5918 perl optional libyaml-syck-perl_1.34-2+deb13u2_riscv64-buildd.buildinfo
 9645aaa6161c09ca6d3886d4503aabba 80268 perl optional libyaml-syck-perl_1.34-2+deb13u2_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=yOz8
-----END PGP SIGNATURE-----