-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 08 Aug 2026 11:20:57 +0200
Source: libyaml-syck-perl
Binary: libyaml-syck-perl libyaml-syck-perl-dbgsym
Architecture: armel
Version: 1.34-2+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-ubc-03) <buildd_arm64-arm-ubc-03@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libyaml-syck-perl - Perl module providing a fast, lightweight YAML loader and dumper
Closes: 1142267
Changes:
 libyaml-syck-perl (1.34-2+deb13u3) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * fix: prevent buffer underflow in base60 (sexagesimal) parsing
     (CVE-2026-5089)
   * rebase: apply review feedback
   * fix: prevent memory leaks when Load/LoadJSON croak on parse errors
   * Fix four libsyck memory-safety CVEs reachable from YAML::Syck::Load()
     (CVE-2026-57075, CVE-2026-57076, CVE-2026-57077, CVE-2026-13713)
     (Closes: #1142267)
Checksums-Sha1:
 28201dde9069961023760145ccb0f161b3802dc9 165752 libyaml-syck-perl-dbgsym_1.34-2+deb13u3_armel.deb
 a40b5aa8666654228f40c6a0b6b5be25f09f75f6 5940 libyaml-syck-perl_1.34-2+deb13u3_armel-buildd.buildinfo
 fdc8ef3fc689476539dab0648e5f8c163701e6d1 72220 libyaml-syck-perl_1.34-2+deb13u3_armel.deb
Checksums-Sha256:
 68f4ffbcf8d2efd342f5e69a597ab124aa25d964b451771746fe188cb7e66e14 165752 libyaml-syck-perl-dbgsym_1.34-2+deb13u3_armel.deb
 f6732228cf05a52766e40f6685d086ecb8dc6b49c8288db7b06ec55eb9a90325 5940 libyaml-syck-perl_1.34-2+deb13u3_armel-buildd.buildinfo
 5b87aa85e6d6538c26a195dbf63bd4daeb0f85ee7bf00731e46a17c2665a8697 72220 libyaml-syck-perl_1.34-2+deb13u3_armel.deb
Files:
 fe1734b05c216d763e561af605a65fb4 165752 debug optional libyaml-syck-perl-dbgsym_1.34-2+deb13u3_armel.deb
 e33fa2e1925be33c3cc7ab70bd117957 5940 perl optional libyaml-syck-perl_1.34-2+deb13u3_armel-buildd.buildinfo
 2ea85129816bf114c799dab75c801b3c 72220 perl optional libyaml-syck-perl_1.34-2+deb13u3_armel.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE2kd8oHy+LXk/nybqvzDqKQSGl8UFAmp3XbgACgkQvzDqKQSG
l8XrIA/+Kw6yI+Zarxd3mxONtlnti1xV2nxEwGTDvGLJ7CI5GdNCxkYhzvHOhc0d
9xbB48ACsC63SmI3ndQIJWH3HdT4yC6I4KrMEVv5ZC1teynL4ZaNf21Kahh9WEgL
OubbGvDk0VBntT0uZMUQQ0OpjvROcwk4jlTd4FeRcxMuZSG30eHha75dd1x32mcx
rhIVYIAjMaBdirItATdyi943kZqmyAIWSQJI5AFHg178AQd+oB1QwbdHo7dJPqcp
xSUwICG6SROfffYarWpecOlrPytnfad1uOX/TkzDdWwntDrKhQa5cJG0Wanr3W2a
dNk1BasFftmz4CRmWLP6/sudbJbc53pX7fFds4aQS5n7tSmp1FpudaOdbOwe6i9Y
ZnF/I23Et9dhjuVWLYH0o3li21nQk/i29MCYBR2ssJ2QCfbZ+Rlh8b5x1Qct8MQK
HXT5HkplEpJi5cxiyXge/slFEJycFgTvz87MyDr+vCGqrZlnvyTA1yQNV9qOIyKk
ZiN5iszt9bRc+Ymx4DJhBc53DCwCMv43qmLWrnp/Skiykrs5jK5JKFP4wJebG2p0
qBzak2UswZ46dutyIVQTHkLXPG144cXKVp9d0pD2uwDjhCEsI3vkC/3Db9pyQ0Yh
0Yci0jcwSCvYShZ5bCPSaMP/AG7iJ+8YNFJSoox5XwG3TOVMa8s=
=VjoX
-----END PGP SIGNATURE-----