-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 08 Aug 2026 11:20:57 +0200
Source: libyaml-syck-perl
Binary: libyaml-syck-perl libyaml-syck-perl-dbgsym
Architecture: armhf
Version: 1.34-2+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-ubc-03) <buildd_arm64-arm-ubc-03@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libyaml-syck-perl - Perl module providing a fast, lightweight YAML loader and dumper
Closes: 1142267
Changes:
 libyaml-syck-perl (1.34-2+deb13u3) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * fix: prevent buffer underflow in base60 (sexagesimal) parsing
     (CVE-2026-5089)
   * rebase: apply review feedback
   * fix: prevent memory leaks when Load/LoadJSON croak on parse errors
   * Fix four libsyck memory-safety CVEs reachable from YAML::Syck::Load()
     (CVE-2026-57075, CVE-2026-57076, CVE-2026-57077, CVE-2026-13713)
     (Closes: #1142267)
Checksums-Sha1:
 1cbc9ebc85db2179bd856482d33164ce665cb857 168812 libyaml-syck-perl-dbgsym_1.34-2+deb13u3_armhf.deb
 f9b9491456be3bf9ffc3843e2254d0dc3f3eafde 5954 libyaml-syck-perl_1.34-2+deb13u3_armhf-buildd.buildinfo
 247c34f682c2f6e835ccbb27ec9c8077830f3892 73348 libyaml-syck-perl_1.34-2+deb13u3_armhf.deb
Checksums-Sha256:
 90bf74fd185cf6893315a0bf3b4f86ea8b409bf5cd494990af26933aa09bdd41 168812 libyaml-syck-perl-dbgsym_1.34-2+deb13u3_armhf.deb
 254091843daeaa6c2dd8f9b55bc1f4771bc304980beb259bbad5dfbb19ce25f0 5954 libyaml-syck-perl_1.34-2+deb13u3_armhf-buildd.buildinfo
 97cc110bac12e9d9278015a002988a8f6e34b38cb00047160b651d804fae97dc 73348 libyaml-syck-perl_1.34-2+deb13u3_armhf.deb
Files:
 716f504ae28af6c6e88ef5a89946c75a 168812 debug optional libyaml-syck-perl-dbgsym_1.34-2+deb13u3_armhf.deb
 c42d692477fdf866798b21eef4aa87b2 5954 perl optional libyaml-syck-perl_1.34-2+deb13u3_armhf-buildd.buildinfo
 048216b232dc8185ab9590c178c102e9 73348 perl optional libyaml-syck-perl_1.34-2+deb13u3_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=/O2d
-----END PGP SIGNATURE-----