-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 21 Mar 2026 19:19:43 +0100
Source: libyaml-syck-perl
Binary: libyaml-syck-perl libyaml-syck-perl-dbgsym
Architecture: i386
Version: 1.34-2+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libyaml-syck-perl - Perl module providing a fast, lightweight YAML loader and dumper
Changes:
 libyaml-syck-perl (1.34-2+deb12u2) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * fix: address all 4 C-layer audit findings from issue #67 (CVE-2026-4177)
Checksums-Sha1:
 79496827f8c6a49c56ddba909f93880dd3efe2f0 139724 libyaml-syck-perl-dbgsym_1.34-2+deb12u2_i386.deb
 44172a3e2e20d03d8a61d2d6f64a0c12d32a9879 6325 libyaml-syck-perl_1.34-2+deb12u2_i386-buildd.buildinfo
 2d5cd4287884e82da9d636e1543dbbb8de8c7151 83408 libyaml-syck-perl_1.34-2+deb12u2_i386.deb
Checksums-Sha256:
 c96c07592f1a0c740bf51b885f2c12882ff44705c21d78191588fe49ba83a612 139724 libyaml-syck-perl-dbgsym_1.34-2+deb12u2_i386.deb
 4eb3be7447c97990bb0e3607cbe64249dd54fb940a3606e37d5ac85788c4c571 6325 libyaml-syck-perl_1.34-2+deb12u2_i386-buildd.buildinfo
 bab6367e61714b07445863d9dc61142cb243ef012198ce385b629da352e8e258 83408 libyaml-syck-perl_1.34-2+deb12u2_i386.deb
Files:
 5b86b99379ffc4cf197b1c845fea4acc 139724 debug optional libyaml-syck-perl-dbgsym_1.34-2+deb12u2_i386.deb
 d31114db2beba3cc0d93dc48faf1fdeb 6325 perl optional libyaml-syck-perl_1.34-2+deb12u2_i386-buildd.buildinfo
 6c196c183751e215df8203b4faaf0fa4 83408 perl optional libyaml-syck-perl_1.34-2+deb12u2_i386.deb

-----BEGIN PGP SIGNATURE-----
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=MViP
-----END PGP SIGNATURE-----