Unsubscribe > On 10 Aug 2026, at 21:35, Salvatore Bonaccorso <[email protected]> wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > - ------------------------------------------------------------------------- > Debian LTS Advisory DLA-4730-1 [email protected] > https://www.debian.org/lts/security/ Salvatore Bonaccorso > August 10, 2026 https://wiki.debian.org/LTS > - ------------------------------------------------------------------------- > > Package : libyaml-syck-perl > Version : 1.34-1+deb11u2 1.34-2+deb12u3 > CVE ID : CVE-2026-5089 CVE-2026-13713 CVE-2026-57075 CVE-2026-57076 > CVE-2026-57077 > Debian Bug : 1142267 > > Several vulnerabilities were discovered in libyaml-syck-perl, a Perl > module providing a fast, lightweight YAML loader and dumper, which could > result in denial of service and potentially arbitrary code execution. > > For Debian 11 bullseye, these problems have been fixed in version > 1.34-1+deb11u2. > > For Debian 12 bookworm, these problems have been fixed in version > 1.34-2+deb12u3. > > We recommend that you upgrade your libyaml-syck-perl packages. > > For the detailed security status of libyaml-syck-perl please refer to > its security tracker page at: > https://security-tracker.debian.org/tracker/libyaml-syck-perl > > Further information about Debian LTS security advisories, how to apply > these updates to your system and frequently asked questions can be > found at: https://wiki.debian.org/LTS > -----BEGIN PGP SIGNATURE----- > > iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmp6LFdfFIAAAAAALgAo > aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 > NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND > z0T8PhAAi7vONFLi9UJ8ZFxj/nyj1nQsWrvAj1W9AUpE3WxzaLtwGjOAVFa3KnCt > rtd1CazqBcrn4ZLgxo5xuHpztHSmSJhPhSgssG7299wjoFzydx+QikuitpcyJ8O6 > 3kgDpHSyVWUrjmGPhrredqrg4Phh1Y8Pgx3jtybAHe5JC1sY5vvg685rwm+/I5IC > Gdq6KjUhmr8hEhbQCAHDRbwh+DdaIkBqFaewKNek1QQayGq1zZR1325b1tape2Tf > k8l+AMkoSmKySookoRvTSlKt0qOcX1UY4r8M/HYBeZ976gPrRF3ZF/lbq0TSYFHK > VRl1vpvpBiuK5TZkVNo3vHycCK2HNSJxg/K2FyXStd7XVQxLTkR0tY1qJy0gvt2K > 5acUl7nI8zWYpp2cbqIjc7jG9+X8TyGe4F//4BplExOEbxenj3zDbuEOHkyGmggh > JIpzn3jXhKiqTpsRZ26pHNHHGUGTib387FMDyi6jl4eoZ5VZnyApSVsqMbwNwsWL > ngvOLUgBE1U2qIUdQsG0vKpqC+qk0TkjZ3WMw62U310+DV8aC9igWTfHrDI2/0q5 > jaW9Px882P7PPYLN++S4vRfxuEJqFJdUunIAN6yeWrupDwr9KPwlbaF3o/6Dq9gI > EfqsBxcpZpHumlJ1YWR/O8FWjX60kx1/hl93I0mBcJID8mO1X7Y= > =RqBU > -----END PGP SIGNATURE----- >
