-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 08 Aug 2026 11:20:57 +0200
Source: libyaml-syck-perl
Binary: libyaml-syck-perl libyaml-syck-perl-dbgsym
Architecture: s390x
Version: 1.34-2+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (ziehrer) <buildd_s390x-ziehrer@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libyaml-syck-perl - Perl module providing a fast, lightweight YAML loader and dumper
Closes: 1142267
Changes:
 libyaml-syck-perl (1.34-2+deb13u3) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * fix: prevent buffer underflow in base60 (sexagesimal) parsing
     (CVE-2026-5089)
   * rebase: apply review feedback
   * fix: prevent memory leaks when Load/LoadJSON croak on parse errors
   * Fix four libsyck memory-safety CVEs reachable from YAML::Syck::Load()
     (CVE-2026-57075, CVE-2026-57076, CVE-2026-57077, CVE-2026-13713)
     (Closes: #1142267)
Checksums-Sha1:
 c5220e7055ae62f6bd8eda6d0354b544093f46dd 169520 libyaml-syck-perl-dbgsym_1.34-2+deb13u3_s390x.deb
 70560a1b2c3235cd037279c9bd0a9f9b3e1e2f6d 5950 libyaml-syck-perl_1.34-2+deb13u3_s390x-buildd.buildinfo
 09999e8ebea0d699dbbcbd5effb517ca3b68e06f 81100 libyaml-syck-perl_1.34-2+deb13u3_s390x.deb
Checksums-Sha256:
 169bffba827a95910155ab719eb1944bc2d51181bfa5c1079ff1d486548efc03 169520 libyaml-syck-perl-dbgsym_1.34-2+deb13u3_s390x.deb
 ccc5edd7c79bf688fe3f1278ccbb8cd5467fbf7068e2079b79c7658e9d2ba3c2 5950 libyaml-syck-perl_1.34-2+deb13u3_s390x-buildd.buildinfo
 a805b9958b2d51d27744ee3e69d17ac368d50cfe1ea9c219ba5c14f622443223 81100 libyaml-syck-perl_1.34-2+deb13u3_s390x.deb
Files:
 4873a4b7f3de574fc627c9f90febb088 169520 debug optional libyaml-syck-perl-dbgsym_1.34-2+deb13u3_s390x.deb
 af8066a65c34bf97f6515b2cb8375eea 5950 perl optional libyaml-syck-perl_1.34-2+deb13u3_s390x-buildd.buildinfo
 32156067f12401e0c5bd2c7905a91c4d 81100 perl optional libyaml-syck-perl_1.34-2+deb13u3_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=3oQ+
-----END PGP SIGNATURE-----