-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 08 Aug 2026 11:20:57 +0200
Source: libyaml-syck-perl
Binary: libyaml-syck-perl libyaml-syck-perl-dbgsym
Architecture: amd64
Version: 1.34-2+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libyaml-syck-perl - Perl module providing a fast, lightweight YAML loader and dumper
Closes: 1142267
Changes:
 libyaml-syck-perl (1.34-2+deb13u3) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * fix: prevent buffer underflow in base60 (sexagesimal) parsing
     (CVE-2026-5089)
   * rebase: apply review feedback
   * fix: prevent memory leaks when Load/LoadJSON croak on parse errors
   * Fix four libsyck memory-safety CVEs reachable from YAML::Syck::Load()
     (CVE-2026-57075, CVE-2026-57076, CVE-2026-57077, CVE-2026-13713)
     (Closes: #1142267)
Checksums-Sha1:
 f19ec9a258cf0dcd19371f9792e4b2a6fe155acf 164092 libyaml-syck-perl-dbgsym_1.34-2+deb13u3_amd64.deb
 77c48836f3de1a71524d73bdd52282406f506b6d 6088 libyaml-syck-perl_1.34-2+deb13u3_amd64-buildd.buildinfo
 15586de8502bde2eed3901f3c8ec404c7d48d508 80512 libyaml-syck-perl_1.34-2+deb13u3_amd64.deb
Checksums-Sha256:
 c3868fefd1a6d132043159dc997ea7f9eb2c24e52ed700ea78f4ee0401b55ad2 164092 libyaml-syck-perl-dbgsym_1.34-2+deb13u3_amd64.deb
 3b3fc575c968335a430279aef2894281061b13bd326d626a23c31149adc3a3fc 6088 libyaml-syck-perl_1.34-2+deb13u3_amd64-buildd.buildinfo
 c54b4ba103c9f334f71209fb05332956ec217152d3bab6633e5b3d959c10ad13 80512 libyaml-syck-perl_1.34-2+deb13u3_amd64.deb
Files:
 c6232b962da569e17271c468d155c350 164092 debug optional libyaml-syck-perl-dbgsym_1.34-2+deb13u3_amd64.deb
 6924abaaaa53ee5f65d06a3721db5e6e 6088 perl optional libyaml-syck-perl_1.34-2+deb13u3_amd64-buildd.buildinfo
 107d47011dd2c1083788623afee676cd 80512 perl optional libyaml-syck-perl_1.34-2+deb13u3_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=nJtZ
-----END PGP SIGNATURE-----