Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
63916132 by Salvatore Bonaccorso at 2026-05-12T21:28:36+02:00
Track fixed version for CVE-2026-5089/libyaml-syck-perl
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -762,7 +762,7 @@ CVE-2025-54518
NOTE: https://xenbits.xen.org/xsa/advisory-490.html
NOTE:
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7052.html
CVE-2026-5089 (YAML::Syck versions before 1.38 for Perl has an out-of-bounds
read. ...)
- - libyaml-syck-perl <unfixed>
+ - libyaml-syck-perl 1.36-3
NOTE: https://lists.security.metacpan.org/cve-announce/msg/39981051/
NOTE: https://github.com/cpan-authors/YAML-Syck/issues/132
NOTE: https://github.com/cpan-authors/YAML-Syck/pull/133
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/639161325c3e814872756f545ebe8b1150e3145f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/639161325c3e814872756f545ebe8b1150e3145f
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
