-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 08 Aug 2026 11:20:57 +0200
Source: libyaml-syck-perl
Binary: libyaml-syck-perl libyaml-syck-perl-dbgsym
Architecture: riscv64
Version: 1.34-2+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-osuosl-04) <buildd_riscv64-rv-osuosl-04@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libyaml-syck-perl - Perl module providing a fast, lightweight YAML loader and dumper
Closes: 1142267
Changes:
 libyaml-syck-perl (1.34-2+deb13u3) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * fix: prevent buffer underflow in base60 (sexagesimal) parsing
     (CVE-2026-5089)
   * rebase: apply review feedback
   * fix: prevent memory leaks when Load/LoadJSON croak on parse errors
   * Fix four libsyck memory-safety CVEs reachable from YAML::Syck::Load()
     (CVE-2026-57075, CVE-2026-57076, CVE-2026-57077, CVE-2026-13713)
     (Closes: #1142267)
Checksums-Sha1:
 f93b798c605c2edcfc2fb3f593e6a24027d79982 159056 libyaml-syck-perl-dbgsym_1.34-2+deb13u3_riscv64.deb
 751a0601f5d53eda9f4da5a6923a3118cb9f7cc3 6032 libyaml-syck-perl_1.34-2+deb13u3_riscv64-buildd.buildinfo
 afc4c16702305d6864582964e80bf2dd67511762 80664 libyaml-syck-perl_1.34-2+deb13u3_riscv64.deb
Checksums-Sha256:
 98144b48ef9b1a7e5848891cd31fd5c932e7d8dea3f89b303e8fe5c2316d3bc4 159056 libyaml-syck-perl-dbgsym_1.34-2+deb13u3_riscv64.deb
 6c243d67de89f345af480458ecfeb18a692eef9b09172c2375c06a6d2d9fcf1d 6032 libyaml-syck-perl_1.34-2+deb13u3_riscv64-buildd.buildinfo
 5b1e64e439f61c994f9c7046ff5b6f1d37275420eba6724117b1b32987455170 80664 libyaml-syck-perl_1.34-2+deb13u3_riscv64.deb
Files:
 205f3d98983140c0a79a489c180c5fd7 159056 debug optional libyaml-syck-perl-dbgsym_1.34-2+deb13u3_riscv64.deb
 c1adcc3d70867769f7762e8a30bc3292 6032 perl optional libyaml-syck-perl_1.34-2+deb13u3_riscv64-buildd.buildinfo
 e7c4a3c686316ccec7c2ddcea7a29aff 80664 perl optional libyaml-syck-perl_1.34-2+deb13u3_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=yEDq
-----END PGP SIGNATURE-----