-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 21 Mar 2026 19:19:43 +0100
Source: libyaml-syck-perl
Binary: libyaml-syck-perl libyaml-syck-perl-dbgsym
Architecture: amd64
Version: 1.34-2+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libyaml-syck-perl - Perl module providing a fast, lightweight YAML loader and dumper
Changes:
 libyaml-syck-perl (1.34-2+deb12u2) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * fix: address all 4 C-layer audit findings from issue #67 (CVE-2026-4177)
Checksums-Sha1:
 45b8372d1ffeb76cd8c2cfef728baccdb5b0e348 154004 libyaml-syck-perl-dbgsym_1.34-2+deb12u2_amd64.deb
 9bf26440218531b0a5f1f3ef1f0ca61a9272d750 6401 libyaml-syck-perl_1.34-2+deb12u2_amd64-buildd.buildinfo
 88e191a25246fc46a38562724885ad8c2885ed8d 80512 libyaml-syck-perl_1.34-2+deb12u2_amd64.deb
Checksums-Sha256:
 06337531a5108d9ac46235eaaa89763b013f15c1c0368341a08c3a82a5ffd4be 154004 libyaml-syck-perl-dbgsym_1.34-2+deb12u2_amd64.deb
 499907e92ec1dc14ae89c84d5dd4b415f9e94d52d899e702c6fd0632f2728256 6401 libyaml-syck-perl_1.34-2+deb12u2_amd64-buildd.buildinfo
 96dc68104f4ee04a9569e80f6eb125ecabcf7d55754b9217b7f65c3b1760b32d 80512 libyaml-syck-perl_1.34-2+deb12u2_amd64.deb
Files:
 38e997889e97824dbf27080137596508 154004 debug optional libyaml-syck-perl-dbgsym_1.34-2+deb12u2_amd64.deb
 bf87868077080ac56727b4aee9dbcf4c 6401 perl optional libyaml-syck-perl_1.34-2+deb12u2_amd64-buildd.buildinfo
 5a1586bce0d4dd128872133f3d23b569 80512 perl optional libyaml-syck-perl_1.34-2+deb12u2_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmm/qVcACgkQN8Ugyu9d
QiStng/+IUzKfQeD5AzJnHbya19bWqQyGADN+0ntiU50PlZxfEvy++CPqOiWn6+f
W3wH/0UinXHsql3Z702Ciy2hrScmXLZ55gDmSLlBCseeuZKiwM7AZ/LiUm1GbRYj
LctMDJVpKkyUBnW7vinBPd3vnsfCQC8z8rpVl2uyylw5YIHqRPqPzmj8EPCqcnS1
Wi1hM40ih5JgSz0fSh8+gOzTxZN2vKMX89ehsKDqrQVvp/uUbzrWdFj04mWY/Pmo
jyzfLyg3rrz8rK/RxsEwZWtJmsti9yf05n2BtSLkMOtIipGR7i99Fqnc28FzAlFZ
zCCO2+amvl5QCBIUDrhoHrP5mTAvNH7jex0+fztUnR/N/LplPnzS/NlI6xQY0Kud
+7BcxIK6+PfVdgnGeEyvY6gyzBaqzpunQccAo0KL3Jw07dA4cuxyWcvNSGBLPaCH
CBDRblykQzyJd4asP2OU5mY/akFasHK6Wn0xd+gI67bUp9a0m/MHj2uyKiPDUpdv
CFb9/eFn2N62MMw60PXsai+pwG86DdWH2e9DCGf5XOjysAsWgoNGkVtBL8PLc+75
kbfdCjhIi6YQ32DRHwXQujBRuYl6t+l6TBDIjWVqaTIOzFvKnAqz/KMOMNcEWpZl
nPd5brARWRiNjwQOfJSzCRha9C5/vkBz3xSvI8uTE+SeFAuObEE=
=AhDT
-----END PGP SIGNATURE-----