-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 08 Aug 2026 11:20:57 +0200
Source: libyaml-syck-perl
Binary: libyaml-syck-perl libyaml-syck-perl-dbgsym
Architecture: ppc64el
Version: 1.34-2+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) <buildd_ppc64el-ppc64el-osuosl-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libyaml-syck-perl - Perl module providing a fast, lightweight YAML loader and dumper
Closes: 1142267
Changes:
 libyaml-syck-perl (1.34-2+deb13u3) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * fix: prevent buffer underflow in base60 (sexagesimal) parsing
     (CVE-2026-5089)
   * rebase: apply review feedback
   * fix: prevent memory leaks when Load/LoadJSON croak on parse errors
   * Fix four libsyck memory-safety CVEs reachable from YAML::Syck::Load()
     (CVE-2026-57075, CVE-2026-57076, CVE-2026-57077, CVE-2026-13713)
     (Closes: #1142267)
Checksums-Sha1:
 e67ed1440b0de867cbaa6cd19709fb9a94a9f1fb 171216 libyaml-syck-perl-dbgsym_1.34-2+deb13u3_ppc64el.deb
 2f84500a0cc53a6cd0f1b8c1955b3d91fb3335db 6087 libyaml-syck-perl_1.34-2+deb13u3_ppc64el-buildd.buildinfo
 e21011372a573e545e0346b73a36b2a4cb88138a 84328 libyaml-syck-perl_1.34-2+deb13u3_ppc64el.deb
Checksums-Sha256:
 d347c8ca60965e4702ebf1cf7266955c9d768f810b550f558d8edbadb3c3c592 171216 libyaml-syck-perl-dbgsym_1.34-2+deb13u3_ppc64el.deb
 65ebc5d8ca3ce807eaaa174ac9ebac86f41c40a7cba6cddeee4c689d143d78d1 6087 libyaml-syck-perl_1.34-2+deb13u3_ppc64el-buildd.buildinfo
 29b47fb375c670faf0b4f7380bf6210a6a82606bd03737ddbcd3ddc7c08dc62b 84328 libyaml-syck-perl_1.34-2+deb13u3_ppc64el.deb
Files:
 1113b69d4a3866574a4020ac23ce8d28 171216 debug optional libyaml-syck-perl-dbgsym_1.34-2+deb13u3_ppc64el.deb
 c6d807bee2c3994893e442c94420b1a6 6087 perl optional libyaml-syck-perl_1.34-2+deb13u3_ppc64el-buildd.buildinfo
 d69a48f7c8d69f85c3938292a5dab338 84328 perl optional libyaml-syck-perl_1.34-2+deb13u3_ppc64el.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEETLpi2USYGUNSlYhoNINNphgym2QFAmp3mqcACgkQNINNphgy
m2TiVw//TwniPzYi4FMvRyxkw2Fvj0yDCTGnF87WTfndPuy6Ji3XgkFbCeMIgSuI
+MJhxC0gHdPP+j8HE/O+A5qB0KoLQEdriPROzMC11FN+WaNSvCCXUo3aSzUFzxWt
JKUg2HanxBilYhLEMfpe1xTDvGzjXbgsN2rAymNEAFHDyCcCEIATM01yV17Tgj4b
4p2G3vT7EFVc+3z5PXNidL1JL7GR/O2cjaJxg+LWCKVvwnhOySIsQ6kpWR2eSqPq
tIow9++Ee7eDG9msBMocozJgsDn9zDu/fqWInmSsiZnFfF3bDqGI0Ow3Co2Bp6cp
gFLqONWc1lmBnmJiuS3oIUdW9lW/209o17hoAySn2vymzXPnM+T/5X4h/wNc0NTS
IyE7WuSe+WGgFIbLrow6ufIsv18p2bAZ13BTRXVP9I5XQkCwlz0LgtLztT3+5Go9
klOvR5iN/XVty3/tZqmXZ1R5xGoITgJG1paKkCmPT2Ihbv1p+dYgq2zvH81NmVdT
QVYyi6Ab4CAZ5fU3FV+djtgkdrK7ckF1NvW8eUjikpxVtvD0gH7LgGaUuVlYM9x5
pCwsGWjhIfcImYd3brfcncVKcS3n9cFaF2sLYOwUYlY3I0BtZzRzj+ijjvYQLeHQ
0SEyKjwrzUrw7PkssE7dy0aKK05DJm9y6qsvqm7RB1kI5VKzoKM=
=sLDO
-----END PGP SIGNATURE-----