Skip to content
OpenAdvisories
Critical DSA-6175-1 1 CVE

libyaml-syck-perl - security update

Published Mar 22, 2026 · Updated Mar 22, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 12 libyaml-syck-perl 1.34-2+deb12u2
Debian · 13 libyaml-syck-perl 1.34-2+deb13u2

Vulnerabilities 1

  • Critical 9.1
    CVE-2026-4177

    YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter

    YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder c…

    TODDR YAML::Syck libyaml-syck-perl perl-YAML-Syck Debian Ubuntu Azure Linux Alpine