-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 08 Aug 2026 11:29:41 +0200 Source: libyaml-syck-perl Architecture: source Version: 1.34-2+deb12u3 Distribution: bookworm-security Urgency: high Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1142267 Changes: libyaml-syck-perl (1.34-2+deb12u3) bookworm-security; urgency=high . * Team upload. * fix: prevent buffer underflow in base60 (sexagesimal) parsing (CVE-2026-5089) * rebase: apply review feedback * fix: prevent memory leaks when Load/LoadJSON croak on parse errors * Fix four libsyck memory-safety CVEs reachable from YAML::Syck::Load() (CVE-2026-57075, CVE-2026-57076, CVE-2026-57077, CVE-2026-13713) (Closes: #1142267) Checksums-Sha1: 0e274ecb83568bb458b0676cca937a7a22dc332c 2352 libyaml-syck-perl_1.34-2+deb12u3.dsc f9d8bdb8fdec8ebbd7e49fa739b40d9c3d348896 18820 libyaml-syck-perl_1.34-2+deb12u3.debian.tar.xz Checksums-Sha256: d7b6d31d638c72d96e5107d39cc8f3ed33d86541c70fcc451fd3281ca501d286 2352 libyaml-syck-perl_1.34-2+deb12u3.dsc dda48cc9eedfe1ed3f5ec6cdf43600c14499fdbbf88811a56072c7f1941d0f71 18820 libyaml-syck-perl_1.34-2+deb12u3.debian.tar.xz Files: e4335224aa1135898943d3dbd606af9a 2352 perl optional libyaml-syck-perl_1.34-2+deb12u3.dsc 13c82a6efec6f72416523f720ae29aae 18820 perl optional libyaml-syck-perl_1.34-2+deb12u3.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmp6IV1fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EudIP/AgXfSOb8KmtFvNBCAKZbBR0FcPJnSIh p9e1qKWcdO3YLkdeEebOlPrbxH+FZQhQI6uW1/8ws4KxUGlpIjzR/79877YR7wq9 t7+5n0MJqSUU++SS9QMZza4dwupV11xuIpx1FbgZu0DZZ5zI8BxhO/pczyUp++lK DXilN0xXoZutPb4Qig+9Ui5qUbPYVq75+cps95slTK6einN4DwmXYX8sf0bkQdss TnsVpIow112yAQ7Rwy+21Ukzc57BgMfNopJWm52kMYfj8XZXDlD6cexxRS/28c5W hODiqtGctQOSD9kxN0kMTJJ3zxbhgd+GoWj0rWM54IjaJWZ3vTp0IyWNIhe4PkBD OUKy8q1cw14C9+5DR5e/agKzCAxwcZstgn+YjiBOtkTdgMUTmM3FlorG7cx0ORBw 0/m9QZSFUvN/CXkAUfKD/doHS0slH2tdo8vITXFRPXR/OdoQupMrk67LcwwMpoqa 5UbpO7l+zXoYzyXU3ji5uGO9TaywgeQCljKCwUXTwiWahim/MePqIAkZV6JSyWvz VKsY4zepyM/DBjQZJT6aSlSjOZ5Mtw2/SThj0SKzuZYaujHmf6IH16yR+2pOJTID Il7Isvku6sS7cQDzXURg8haO/05ooqQN1WFNR57MuNo1NosztNZlFliKwvtXDzFS CN0Q0MhDpPya =2N/c -----END PGP SIGNATURE-----
