-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 08 Aug 2026 11:34:01 +0200 Source: libyaml-syck-perl Architecture: source Version: 1.34-1+deb11u2 Distribution: bullseye-security Urgency: high Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1142267 Changes: libyaml-syck-perl (1.34-1+deb11u2) bullseye-security; urgency=high . * Team upload. * fix: prevent buffer underflow in base60 (sexagesimal) parsing (CVE-2026-5089) * rebase: apply review feedback * fix: prevent memory leaks when Load/LoadJSON croak on parse errors * Fix four libsyck memory-safety CVEs reachable from YAML::Syck::Load() (CVE-2026-57075, CVE-2026-57076, CVE-2026-57077, CVE-2026-13713) (Closes: #1142267) Checksums-Sha1: 10c6fdf2200cc80d5d54961874cff9d3846e1e10 2352 libyaml-syck-perl_1.34-1+deb11u2.dsc 3e77e2c201661b3c21f9c9faafd731b0e305efa9 18888 libyaml-syck-perl_1.34-1+deb11u2.debian.tar.xz Checksums-Sha256: d95957869963706f45a17946ab1fd59a9ed238174561c96e9adc83809783fa24 2352 libyaml-syck-perl_1.34-1+deb11u2.dsc c9931653c0102a2dbc4a6cd6cf591e8a550c9b3a543c20e4eee6a25e195e57bf 18888 libyaml-syck-perl_1.34-1+deb11u2.debian.tar.xz Files: c319f57f97b368543b9ee7d7938bdac9 2352 perl optional libyaml-syck-perl_1.34-1+deb11u2.dsc 0edb07937c1ef6cd6105399f341dcf60 18888 perl optional libyaml-syck-perl_1.34-1+deb11u2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmp6JU9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EV3AP/0fQhvA/IqEUCF1grHItaLY1+IHC2qs2 LeROdTbG2CRouHU70CES6Te17DyXDqr2a/gEpdmD8lqlpbaDruoa1RJASVMp/MBP MKdOI1Q8bLx9whQxSgOwD4GA95FTlRzk61Xa6gheZL+tcRkrAAnQqwBnY204uj3I oF+Ub/SVcytdn+obQjmIn86GkvqTZDP7kFK07NNb8GjH2RhnXdIDOXSTV8iWaoiL UKzIUxR2y5Xj76eK5a4cXvzzQsEVgGIb8Gzw1PCM9wv5ptzaTtMOF5N+orfahKSx A/1BY6Mgpkn6ieWpALX2cT830pQclbds/0VTuO7b5iTmi9i5shGqcHKUOfTwANp5 ISDEqVVrrmgcttntIr8OcTVyICskUJZybbxLq8Uks7M1FEsYemxoqtPUEw0gjw85 HDXpifMfIy2q3dDYp92yD6UPphUoSQY2HM1j32RioW+03s3NNTm4oeOmnUYbnfkB hqOSYIihzfZN7JamatxEpi1a5wYj948m4qEpcaMXmFTRNf44NRnxwa3q++eBtASK 1ztQQVQYUt7Tm3lehSdjPRSTIgoTSb1ui58FPmrOllvx6cDPvu9I5GVMK1bt0JXo hFXnWp/aGCji1ln2sBMkIxlaufJNP88V5LpARg+v4f69gaXMGrj4/gjuHy4q33Mb P1p2OWBehYQI =Kvrr -----END PGP SIGNATURE-----