-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 08 Aug 2026 11:20:57 +0200
Source: libyaml-syck-perl
Binary: libyaml-syck-perl libyaml-syck-perl-dbgsym
Architecture: i386
Version: 1.34-2+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libyaml-syck-perl - Perl module providing a fast, lightweight YAML loader and dumper
Closes: 1142267
Changes:
 libyaml-syck-perl (1.34-2+deb13u3) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * fix: prevent buffer underflow in base60 (sexagesimal) parsing
     (CVE-2026-5089)
   * rebase: apply review feedback
   * fix: prevent memory leaks when Load/LoadJSON croak on parse errors
   * Fix four libsyck memory-safety CVEs reachable from YAML::Syck::Load()
     (CVE-2026-57075, CVE-2026-57076, CVE-2026-57077, CVE-2026-13713)
     (Closes: #1142267)
Checksums-Sha1:
 db589fd7e20816b323c6242a864a06aa72f46dbe 149500 libyaml-syck-perl-dbgsym_1.34-2+deb13u3_i386.deb
 25ab2baa66c4d8dc5db5f1f493bcb0b8a53ed6d2 5989 libyaml-syck-perl_1.34-2+deb13u3_i386-buildd.buildinfo
 e2bcd29e6aed83d8a0025ed4012732daf1031fc9 83672 libyaml-syck-perl_1.34-2+deb13u3_i386.deb
Checksums-Sha256:
 73134fe5f1b39e4120507cbf9f1436fee940396f6f3858e91aaa38dcf109a9c1 149500 libyaml-syck-perl-dbgsym_1.34-2+deb13u3_i386.deb
 f6cb38d10b10f74a2f1e53450c0331eb490ef70a58648daa1d95ec5fadfd5322 5989 libyaml-syck-perl_1.34-2+deb13u3_i386-buildd.buildinfo
 b1717f142b4f821c87996e682a83431dd582fe51424ef86f2a1f92073c8c2648 83672 libyaml-syck-perl_1.34-2+deb13u3_i386.deb
Files:
 786cc7d5533d1dc8ed76002ba71db364 149500 debug optional libyaml-syck-perl-dbgsym_1.34-2+deb13u3_i386.deb
 ab29fcdca5b5bd3658a83f699c0f91d9 5989 perl optional libyaml-syck-perl_1.34-2+deb13u3_i386-buildd.buildinfo
 c656f2c80ec9d2d08c0c9c7deea6c245 83672 perl optional libyaml-syck-perl_1.34-2+deb13u3_i386.deb

-----BEGIN PGP SIGNATURE-----
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=5UAf
-----END PGP SIGNATURE-----