-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 21 Mar 2026 19:13:45 +0100 Source: libyaml-syck-perl Architecture: source Version: 1.34-2+deb13u2 Distribution: trixie-security Urgency: high Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Changes: libyaml-syck-perl (1.34-2+deb13u2) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * fix: address all 4 C-layer audit findings from issue #67 (CVE-2026-4177) Checksums-Sha1: eee80e1c546eceb1c83418c952909cc665506d65 2352 libyaml-syck-perl_1.34-2+deb13u2.dsc 9db8d70635dca27a3e29248d942c708d39e47938 166886 libyaml-syck-perl_1.34.orig.tar.gz 43fb80917d5540c6afc9017e292a923e8733a0ab 10036 libyaml-syck-perl_1.34-2+deb13u2.debian.tar.xz Checksums-Sha256: 89ba77c3d34a13d5e9cd88bfa70c60dd6173a45f61a52a637758ace93c5fb2a5 2352 libyaml-syck-perl_1.34-2+deb13u2.dsc cc9156ccaebda798ebfe2f31b619e806577f860ed1704262f17ffad3c6e34159 166886 libyaml-syck-perl_1.34.orig.tar.gz 47bf03c00fc3b0643d29b1f686af2b1467bd6ce342735c6f14e1317982a6bf75 10036 libyaml-syck-perl_1.34-2+deb13u2.debian.tar.xz Files: a6e749f62a8ef3c3d2c9b2418a001c2a 2352 perl optional libyaml-syck-perl_1.34-2+deb13u2.dsc 4aae72f5c06dccd6ed6ea9b029104183 166886 perl optional libyaml-syck-perl_1.34.orig.tar.gz 5868a54703ca479a22357468caa3d919 10036 perl optional libyaml-syck-perl_1.34-2+deb13u2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmm/mdtfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EurwP/06znQ3TJN34wO1Nw9lhVJYL8qG7la4N fmgFfp2sgaUUwBDRBaDgTKExuDlyKLP9ZtCZRkZ7ozHRyJ5OKu1mzGTwxLBaMVXh hhxghG6SEdL4Pgscn416B0TBCURnaFxjd+XvtERnUNwkVyG4sRI1plU1H0Kf0FZm wUGWOeU4Q/BbdJt86VNqas96IriZSH7Zv/MD9JODi3TM2MS/RwgrGOy+sqeS3cnp Bdlfw+xUJjbPi8og2UVYV4xXTCrxPjUsxN8Vgi56J/AzGcfJbBtiIxfvo3wlwf3S gFd5jkOeKA1K23EU6+MgiQjX8SdAYIcgh54qH3npmL/OL7y6GBB4BU2/QDtSVxyy DU1yGoSxr0n/PdHcr6Qjpee41zk1J9++6PWFZCX8In/m+YY/Dx6u/O4Rud6UCVNn eyUnhWnuUeht+65wW03CDcKdOEFF23Q0B0ICVgarjpxgZWNVrACkudnsf6p1hEB/ MB4S++Jhkd5Vv37anSpPjfrtAKyrSoTDacsRF8DpAFeBZyAaZfRLnUDYmgQNQXAV t8QMzKsTU4liatKKu8RsQGnwc4FgD8eTKTnDRP6KWitEuiPsx8t0e+GS1lhlOLkM Tdfsf1DHI/0qUm2gy3lRBQsxoMz9x4z3hDi1JM02HypxXobL8uEfsCiW70gnunAi RLFkWWk3JpKj =CEIe -----END PGP SIGNATURE-----