-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 21 Mar 2026 19:13:45 +0100
Source: libyaml-syck-perl
Binary: libyaml-syck-perl libyaml-syck-perl-dbgsym
Architecture: amd64
Version: 1.34-2+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libyaml-syck-perl - Perl module providing a fast, lightweight YAML loader and dumper
Changes:
 libyaml-syck-perl (1.34-2+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * fix: address all 4 C-layer audit findings from issue #67 (CVE-2026-4177)
Checksums-Sha1:
 50f0e35bacdee59b6341411da36de11d988d25ba 163328 libyaml-syck-perl-dbgsym_1.34-2+deb13u2_amd64.deb
 465bfb3381fecc97e3ddb2b38ae3ba8ec5656b73 5974 libyaml-syck-perl_1.34-2+deb13u2_amd64-buildd.buildinfo
 5dd71419e24ef396a13a71f38f2048e93826b6d4 79852 libyaml-syck-perl_1.34-2+deb13u2_amd64.deb
Checksums-Sha256:
 e0b48d3e9cef70f494dc21c1bb41aeda7840d6d4290efbabfddb2a9b963f8390 163328 libyaml-syck-perl-dbgsym_1.34-2+deb13u2_amd64.deb
 30a1b402880be58cf1982f30df52091cfffc9d2999e1f58d3b76ce94f7bbe0de 5974 libyaml-syck-perl_1.34-2+deb13u2_amd64-buildd.buildinfo
 a930fb7da10e366610beea879e747b3568a7a52f37f282f2dfbaa61b9ae7003c 79852 libyaml-syck-perl_1.34-2+deb13u2_amd64.deb
Files:
 67f3126d63887b9060e510a78100b853 163328 debug optional libyaml-syck-perl-dbgsym_1.34-2+deb13u2_amd64.deb
 29b611f131f5ea50dd2ab11c9c36117e 5974 perl optional libyaml-syck-perl_1.34-2+deb13u2_amd64-buildd.buildinfo
 8e8fbdad5aea5bbf7ffb6b6fd3b56b52 79852 perl optional libyaml-syck-perl_1.34-2+deb13u2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=zhD+
-----END PGP SIGNATURE-----
