-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 08 Aug 2026 11:20:57 +0200
Source: libyaml-syck-perl
Binary: libyaml-syck-perl libyaml-syck-perl-dbgsym
Architecture: arm64
Version: 1.34-2+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-ubc-03) <buildd_arm64-arm-ubc-03@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libyaml-syck-perl - Perl module providing a fast, lightweight YAML loader and dumper
Closes: 1142267
Changes:
 libyaml-syck-perl (1.34-2+deb13u3) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * fix: prevent buffer underflow in base60 (sexagesimal) parsing
     (CVE-2026-5089)
   * rebase: apply review feedback
   * fix: prevent memory leaks when Load/LoadJSON croak on parse errors
   * Fix four libsyck memory-safety CVEs reachable from YAML::Syck::Load()
     (CVE-2026-57075, CVE-2026-57076, CVE-2026-57077, CVE-2026-13713)
     (Closes: #1142267)
Checksums-Sha1:
 ba16a72a12f1507bacd9ccc3da1f10e4354326a5 160392 libyaml-syck-perl-dbgsym_1.34-2+deb13u3_arm64.deb
 362e806bb372b1a6bdb15afeac0a9fb92213c4cb 6072 libyaml-syck-perl_1.34-2+deb13u3_arm64-buildd.buildinfo
 e25fea344efec13b6dc9852604c89c0fc91d1339 72788 libyaml-syck-perl_1.34-2+deb13u3_arm64.deb
Checksums-Sha256:
 c948d8c34b334922784173da4ae941705dbd0cdb98e5fe5bfdee8010ba4f8c2a 160392 libyaml-syck-perl-dbgsym_1.34-2+deb13u3_arm64.deb
 380964d8770dec9347352a92aa0e990c875bb87ecc5d81bd0b1c04ccbd4cd902 6072 libyaml-syck-perl_1.34-2+deb13u3_arm64-buildd.buildinfo
 d0c882810a6262e8915674bf2f0601fb07b1db3aeabdd93ed8b1d5c03bc8bd4c 72788 libyaml-syck-perl_1.34-2+deb13u3_arm64.deb
Files:
 36b626368e4d6b1e43cb23d81bcfe0db 160392 debug optional libyaml-syck-perl-dbgsym_1.34-2+deb13u3_arm64.deb
 048fef610d897c809d80fa859398a2db 6072 perl optional libyaml-syck-perl_1.34-2+deb13u3_arm64-buildd.buildinfo
 d84a49c806bd1268a12165dbd1b33ba9 72788 perl optional libyaml-syck-perl_1.34-2+deb13u3_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=ohf3
-----END PGP SIGNATURE-----