Debian/libyaml-syck-perl: high 7.3
YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 (sexagesimal) parsing code in perl_syck.h has a buffer underflow bug in both int#base60 and float#base60 handlers. When p
Action: Upgrade libyaml-syck-perl to 1.34-2+deb12u3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.34-2+deb12u3 | - |
Fixed versions
| 1.34-2+deb12u3 |
Sources
published · modified · JSON