[From nobody Fri Jul 17 14:23:07 2026 Received: (at 1142267-close) by bugs.debian.org; 17 Jul 2026 13:20:23 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 98; hammy, 150; neutral, 178; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:33190) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wkiUJ-00HQ2x-1x for 1142267-close@bugs.debian.org; Fri, 17 Jul 2026 13:20:23 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wkiUI-0065bE-10 for 1142267-close@bugs.debian.org; Fri, 17 Jul 2026 13:20:22 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=7eT7y+gJs3eZKwK3jIR/5y8yTEJUWCLx9MX9J0eNVlA=; b=RyYLvAGcA9JtyAr/Os2zJwv675 keVs6C8QvF/ic+fZyFVHJDTeaHpzV2B84R16innH895mxLYfmcy/uk0GCStokQQ9LPF8Dw+ks9rqb zBcKsfhkxfRnw8RjqMJVwv/PSeIYE6fdrsPSLAO0uDxCkZw0pWlm7fItA3qjH0Kpcv9aOehytiNbR c6IlqQWmFoeW5pKASWTBYOyK1xjiuzbmERSn6xnm9nuscpqTYzv1z18OTr8w+RJ6prtcvb/VLExeH rzt3uprLg8nL1YQHjViRGvD4q9ggoJF+FKZt4eXEl2GoYp54MypjX7KJxLTt+aCbTu4R9ctIhNy0/ kpyHKYoQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wkiUH-000000000Xd-1f7g; Fri, 17 Jul 2026 13:20:21 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: gregor herrmann <gregoa@debian.org> To: 1142267-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libyaml-syck-perl Debian: DAK Debian-Changes: libyaml-syck-perl_1.47-1_source.changes Debian-Source: libyaml-syck-perl Debian-Version: 1.47-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1142267: fixed in libyaml-syck-perl 1.47-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============7183602644527216396==" Message-Id: <E1wkiUH-000000000Xd-1f7g@fasolo.debian.org> Date: Fri, 17 Jul 2026 13:20:21 +0000 --===============7183602644527216396== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libyaml-syck-perl Source-Version: 1.47-1 Done: gregor herrmann <gregoa@debian.org> We believe that the bug you reported is fixed in the latest version of libyaml-syck-perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1142267@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. gregor herrmann <gregoa@debian.org> (supplier of updated libyaml-syck-perl pa= ckage) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 17 Jul 2026 14:57:10 +0200 Source: libyaml-syck-perl Architecture: source Version: 1.47-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1142267 Changes: libyaml-syck-perl (1.47-1) unstable; urgency=3Dmedium . * Import upstream version 1.47. - Fix four libsyck memory-safety CVEs reachable from the default YAML::Syck::Load() path on untrusted input with no special flags: CVE-2026-57077 CVE-2026-57076 CVE-2026-57075 CVE-2026-13713 (Closes: #1142267) * Drop gcc15-fix.patch, fixed in 1.37 release. * Drop fix-address-all-4-C-layer-audit-findings-from-issue-.patch. Taken from upstream Git, fixed in 1.37. * Drop fix-prevent-buffer-underflow-in-base60-sexagesimal-p.patch. Taken from upstream Git, fixed in 1.45. * Declare compliance with Debian Policy 4.7.4. * Add debian/tests/pkg-perl/smoke-tests. Only run t/*.t during autopkgtests, as during build. Checksums-Sha1: a0552c550ac2ddfd0f8c9766b0c29b961c2c3aa8 2414 libyaml-syck-perl_1.47-1.dsc 7c421304c7b213127862c667a3f438c06fd712a8 270328 libyaml-syck-perl_1.47.orig.= tar.gz db399c620a6936b260fd21395bd73f0c8f5619bd 7376 libyaml-syck-perl_1.47-1.debia= n.tar.xz Checksums-Sha256: cbf09b3fe6f9ab20436677ccb255231695ef38bea81be04187f426368cef0c53 2414 libyam= l-syck-perl_1.47-1.dsc 672196ca1c021e3c68f4b5f7b4aec305ad471bbbf448c53c7e40034d6ebb7e1d 270328 liby= aml-syck-perl_1.47.orig.tar.gz dd47e6d2895009db7dad157154801602db32cb5814e07825ec9eb3b50f9c46f4 7376 libyam= l-syck-perl_1.47-1.debian.tar.xz Files: 02b160cb2c4a239e686d1329e1272884 2414 perl optional libyaml-syck-perl_1.47-1= .dsc c9202ef678821a1e723defed86353faf 270328 perl optional libyaml-syck-perl_1.47= .orig.tar.gz edb3524a9b347cd683e0c7ac51a8328c 7376 perl optional libyaml-syck-perl_1.47-1= .debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmpaJ39fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgbIUhAArjCtyT/GXQXx7jh1DrN7In/Oje1CagSS5KfcFt8ks9guSMIO9EhxKXg0 B38PNC5Xu3tiqe9hu3+2KynhehcwiWM+R5iKc6J5W4i5HmOEd7BoxDPO6vgv5Eof oWzpSft498C0sKZ0lWYQGFgfmxCaiTvv/ddNbiNOGhzSg9d8cUMIILyVHry4dcb+ oqkvRjufAUWLBpYPm9XZzV8yi7JHywUoUCl+c7APbEnwCuJcTncHGTWKzoEOauC8 UeTcV0kymTL6y/hqjHxJNY9nWdizuxn9mnz4A7AnsP8bkN7izizCTiwWp152410k 1ExxlSoHJIiiG/ibD3AwSiUB2SPVV01mXEpAh7hJQP7UEUTQmm/+i1034HMShk7B WfpMufJ5IqeozmD2cOBFuhdc/rO8iCqQaQ9cVaphZYiRstGwl6A4iUZX1otVfqD7 NWB59MaHwQeihO/7g4aOylhmYDMMmFETru9iUtEMT2EQU5Wu5WlldmhDvezsQX+a Plwjj2ZM+gMd8Kra52eFn2uQX2PFTAdpcVDHDeBiVYCh9bvXziF/+R3rbYSM8+hc 4agoud+4oUush52qTgLGcTMGT+tjXFJwyd1FauKxuCVbOnapJbu4Q7tYOPo6omDf i3bGJ4ZG2WEeAmX5/Fcd3P5DbQy6p165jIweXZkadPnjYX/HC3I=3D =3DYhBM -----END PGP SIGNATURE----- --===============7183602644527216396== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCalosFQAKCRCb9qggYcy5 ISS6AQCBWR6CN6jMrj/Bxq1efcDd5zBfCTYP9VPUr/ttmBn66wD/QWe+DkPe27u+ EJbgeOK4T/UUSUED1TBJdsxdYoGvrg0= =NZId -----END PGP SIGNATURE----- --===============7183602644527216396==-- ]