Debian/libyaml-syck-perl: high 7.3
YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 (sexagesimal) parsing code in perl_syck.h has a buffer underflow bug in both int#base60 and float#base60 handlers. When p
Action: Upgrade libyaml-syck-perl to 1.36-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.36-3 | - |
Fixed versions
| 1.36-3 |
Sources
- osv: DEBIAN-CVE-2026-5089#Debian:14/libyaml-syck-perl
- https://security-tracker.debian.org/tracker/CVE-2026-5089
published · modified · JSON