-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4730-1 [email protected]
https://www.debian.org/lts/security/ Salvatore Bonaccorso
August 10, 2026 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------
Package : libyaml-syck-perl
Version : 1.34-1+deb11u2 1.34-2+deb12u3
CVE ID : CVE-2026-5089 CVE-2026-13713 CVE-2026-57075 CVE-2026-57076
CVE-2026-57077
Debian Bug : 1142267
Several vulnerabilities were discovered in libyaml-syck-perl, a Perl
module providing a fast, lightweight YAML loader and dumper, which could
result in denial of service and potentially arbitrary code execution.
For Debian 11 bullseye, these problems have been fixed in version
1.34-1+deb11u2.
For Debian 12 bookworm, these problems have been fixed in version
1.34-2+deb12u3.
We recommend that you upgrade your libyaml-syck-perl packages.
For the detailed security status of libyaml-syck-perl please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libyaml-syck-perl
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=RqBU
-----END PGP SIGNATURE-----
