-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 21 Mar 2026 19:13:45 +0100
Source: libyaml-syck-perl
Binary: libyaml-syck-perl libyaml-syck-perl-dbgsym
Architecture: armel
Version: 1.34-2+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-01) <buildd_arm64-arm-ubc-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libyaml-syck-perl - Perl module providing a fast, lightweight YAML loader and dumper
Changes:
 libyaml-syck-perl (1.34-2+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * fix: address all 4 C-layer audit findings from issue #67 (CVE-2026-4177)
Checksums-Sha1:
 40df5b201df7f0bdbc40d5f3e46d1cd1b2f4d1f8 164860 libyaml-syck-perl-dbgsym_1.34-2+deb13u2_armel.deb
 be52f46658270ce779e1ef97f011fef6220d2f4f 5826 libyaml-syck-perl_1.34-2+deb13u2_armel-buildd.buildinfo
 328a6d5a289dca347555a8944d7c5be0e468daed 71776 libyaml-syck-perl_1.34-2+deb13u2_armel.deb
Checksums-Sha256:
 7430db8551f0114e1441a0848c762e216d5e3009a90306707582586a0e112820 164860 libyaml-syck-perl-dbgsym_1.34-2+deb13u2_armel.deb
 1967ab7f7fd2bb0dee283fb0775f50560062ff7a0d679c1a9643e75ed65b9174 5826 libyaml-syck-perl_1.34-2+deb13u2_armel-buildd.buildinfo
 d62ab62054022c26cbb8cba62aa44d93228d10ffc7e6eb73a755e35c8d4f7557 71776 libyaml-syck-perl_1.34-2+deb13u2_armel.deb
Files:
 6b247741a91067d520e3173cef771908 164860 debug optional libyaml-syck-perl-dbgsym_1.34-2+deb13u2_armel.deb
 1becee19947f284ba3dfd6a97036f5a8 5826 perl optional libyaml-syck-perl_1.34-2+deb13u2_armel-buildd.buildinfo
 d2de0771ddfa03a9a0a889cf2809106f 71776 perl optional libyaml-syck-perl_1.34-2+deb13u2_armel.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEq41qkgEcGaML+/CnCr/D/stJkDwFAmm/obIACgkQCr/D/stJ
kDyZzg/6Aka3Ly7LsZT4PVl+5n7SqOj9g/6lRVIUFZJ5TUyyhlwxwAlXGbFN8Tll
z4IUmBxjeA1HOVIIrLlplhcE3oh2ol0YKawKbR4ZXXCHE4AZjm9gsi2fXvOOTNX/
nAZquZL+yyqpuKwjYdU/wAgPKSTNa/chdiyMjwCdelZzppvleOq47ZllCGwiku9d
uQUuIV5yco01ABIkJV9YkJThdYU4wXaPRvgc7o6rcEET/db2JKqB9085PjKhsxLV
AETe+OLx3MaWTfDBNVd9cdhlMiu0HWGkFu2/Ftw7E4MBwLUjudpUtLF1jIBxqarZ
0FQKhZzaQEfTU7L+01cLbQFrHYnPQvHUJfUXclZtXvBZlo/KNm6oNuZgXYgpY9oj
Zj9n4FHb4//Q4PfPJ2REUfRkpnimSU4W+9LDadK2Bt39QrOATBCFHBRZMq5LsP5X
T8Mb+LGdINeJTimfDuRGxbq9W/lEnMUZqaBQce/IMICGhnzuXMOoxOVj+GPnlNXG
vneWrIgHfwphErwBRI+Sxpwr3AWkgYgz2VR5m9lJi21fAsGKhJXpguzEBIn8A9Xy
Yg8KbI2N6MVzHOJpdYE38ZmoQXV8yzVel7qHfx9/jffxvQ8S5Jd9a8Yj/oR6znpi
/j15Im75/2toR15G5GuQELByo0YlMh7v5JX2yxReFgSbgj8N8ZY=
=Wlfg
-----END PGP SIGNATURE-----