{"id":"CVE-2026-4177","aliases":["ALPINE-CVE-2026-4177","ALSA-2026:6470","AZL-109508","AZL-79977","BELL-CVE-2026-4177","DEBIAN-CVE-2026-4177","DSA-6175-1","EUVD-2026-12523","GHSA-72r6-p2x3-g9gj","MGASA-2026-0058","RHSA-2026:6470","RHSA-2026:8311","RLSA-2026:6470","UBUNTU-CVE-2026-4177","openSUSE-SU-2026:10551-1","openSUSE-SU-2026:20771-1"],"status":"published","title":"YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter","description":"YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter.\n\nThe heap overflow occurs when class names exceed the initial 512-byte allocation.\n\nThe base64 decoder could read past the buffer end on trailing newlines.\n\nstrtok mutated n-\u003etype_id in place, corrupting shared node data.\n\nA memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming anchor string 'a' was leaked on early return.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00455,"percentile":0.39771,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120","CWE-122"],"published":"2026-03-16T22:30:25Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Alpine:v3.24","package":"perl-yaml-syck","fixed_in":["1.45-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"perl-YAML-Syck","fixed_in":["1.30-6.el8_10"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"perl-yaml-syck","fixed_in":["1.34-r3"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"perl-yaml-syck","fixed_in":["1.34-r6"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"perl-yaml-syck","fixed_in":["1.37-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libyaml-syck-perl","fixed_in":["1.34-2+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libyaml-syck-perl","fixed_in":["1.34-2+deb13u2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libyaml-syck-perl","fixed_in":["1.36-2"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"perl-YAML-Syck","fixed_in":["1.340.0-4.1.mga9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"perl-YAML-Syck","fixed_in":["0:1.30-6.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"perl-YAML-Syck-debuginfo","fixed_in":["0:1.30-6.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"perl-YAML-Syck-debugsource","fixed_in":["0:1.30-6.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"perl-YAML-Syck","fixed_in":["0:1.27-3.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"perl-YAML-Syck-debuginfo","fixed_in":["0:1.27-3.el7_9.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"perl-YAML-Syck","fixed_in":["0:1.30-6.el8_10"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"perl-YAML-Syck","fixed_in":["1.440.0-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.24","package":"perl-yaml-syck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.45-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"perl-YAML-Syck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30-6.el8_10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"perl-YAML","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.30-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"perl-YAML-Syck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.34-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"perl-yaml-syck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.34-r2"},{"fixed":"1.34-r3"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"perl-yaml-syck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.34-r5"},{"fixed":"1.34-r6"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"perl-yaml-syck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.34-r1"},{"fixed":"1.37-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libyaml-syck-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34-2+deb12u2"}]}],"versions":["1.34-2","1.34-2+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"libyaml-syck-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34-2+deb13u2"}]}],"versions":["1.34-2","1.34-2+deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"libyaml-syck-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-2"}]}],"versions":["1.34-2","1.34-3","1.34-4","1.36-1"]},{"source":"osv","ecosystem":"Debian:12","package":"libyaml-syck-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34-2+deb12u2"}]}],"versions":["1.34-2","1.34-2+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"libyaml-syck-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34-2+deb13u2"}]}],"versions":["1.34-2","1.34-2+deb13u1"]},{"source":"osv","ecosystem":"Mageia:9","package":"perl-YAML-Syck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.340.0-4.1.mga9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"perl-YAML-Syck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30-6.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"perl-YAML-Syck-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30-6.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"perl-YAML-Syck-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30-6.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"perl-YAML-Syck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.27-3.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"perl-YAML-Syck-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.27-3.el7_9.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"perl-YAML-Syck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30-6.el8_10"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libyaml-syck-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.27-2build2","1.29-1","1.29-1build1","1.29-1ubuntu0.16.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libyaml-syck-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.29-1build3","1.29-1ubuntu0.18.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libyaml-syck-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.31-1","1.31-1build1","1.31-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libyaml-syck-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.34-1build1","1.34-1build2","1.34-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"libyaml-syck-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.34-2","1.34-2build1","1.34-2build2","1.34-2build3","1.34-2ubuntu0.24.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libyaml-syck-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.34-2build4","1.34-3","1.34-3ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libyaml-syck-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.36-1","1.36-3","1.47-1","1.47-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libyaml-syck-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.34-3","1.34-4","1.36-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"perl-YAML-Syck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.440.0-1.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"toddr","product":"yaml::syck"},{"vendor":"toddr","product":"yaml\\"}],"references":[{"url":"https://github.com/cpan-authors/YAML-Syck/commit/e8844a31c8cf0052914b198fc784ed4e6b8ae69e.patch","tags":["patch","Patch","fix","article"]},{"url":"https://metacpan.org/release/TODDR/YAML-Syck-1.37_01/changes#L21","tags":["release-notes","Release Notes","advisory","article"]},{"url":"http://www.openwall.com/lists/oss-security/2026/03/16/6","tags":["Mailing List","Third Party Advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4177","tags":["vdb-entry","x_refsource_REDHAT","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448277","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4177.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8311","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6470","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4177","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-72r6-p2x3-g9gj"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-4177","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2448277","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-6470.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-4177","tags":["advisory"]},{"url":"https://cpan.org/modules","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4177.json","tags":["advisory"]},{"url":"https://github.com/cpan-authors/YAML-Syck","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-4177","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0058.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35219","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/03/16/6","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6470.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4177","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8311.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:6470","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-4177","tags":["report"]},{"url":"https://lists.security.metacpan.org/cve-announce/msg/38035745/","tags":["report"]},{"url":"https://github.com/cpan-authors/YAML-Syck/commit/e8844a31c8cf0052914b198fc784ed4e6b8ae69e","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4177","tags":["web"]},{"url":"https://bugzilla.suse.com/1252111","tags":["report"]},{"url":"https://bugzilla.suse.com/1259757","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11683","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-4177","title":"YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter","description":"YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter.\n\nThe heap overflow occurs when class names exceed the initial 512-byte allocation.\n\nThe base64 decoder could read past the buffer end on trailing newlines.\n\nstrtok mutated n-\u003etype_id in place, corrupting shared node data.\n\nA memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming anchor string 'a' was leaked on early return.","status":"published","published":"2026-03-16T22:30:25.367Z","modified":"2026-07-15T00:58:43.146Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"adp"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"adp"}],"cwes":["CWE-122","CWE-120"],"updated_at":"2026-11-02T14:19:59.369956Z"}],"euvd":[{"id":"EUVD-2026-12523","description":"YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter.\n\nThe heap overflow occurs when class names exceed the initial 512-byte allocation.\n\nThe base64 decoder could read past the buffer end on trailing newlines.\n\nstrtok mutated n-\u003etype_id in place, corrupting shared node data.\n\nA memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming anchor string 'a' was leaked on early return.","status":"published","published":"2026-03-16T22:30:25Z","modified":"2026-07-15T00:58:43Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T18:19:56.918546Z"}],"ghsa":[{"id":"GHSA-72r6-p2x3-g9gj","title":"YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities...","description":"YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter.\n\nThe heap overflow occurs when class names exceed the initial 512-byte allocation.\n\nThe base64 decoder could read past the buffer end on trailing newlines.\n\nstrtok mutated n-\u003etype_id in place, corrupting shared node data.\n\nA memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming anchor string 'a' was leaked on early return.","status":"published","published":"2026-03-17T00:31:34Z","modified":"2026-06-30T03:35:56Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-120","CWE-122"],"updated_at":"2026-11-02T15:09:04.668745Z"}],"nvd":[{"id":"CVE-2026-4177","description":"YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter.\n\nThe heap overflow occurs when class names exceed the initial 512-byte allocation.\n\nThe base64 decoder could read past the buffer end on trailing newlines.\n\nstrtok mutated n-\u003etype_id in place, corrupting shared node data.\n\nA memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming anchor string 'a' was leaked on early return.","status":"published","published":"2026-03-16T23:16:21.543Z","modified":"2026-07-15T02:22:39.313Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-122","CWE-120"],"updated_at":"2026-11-02T14:12:09.735529Z"}],"osv":[{"id":"ALPINE-CVE-2026-4177","description":"YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter.\n\nThe heap overflow occurs when class names exceed the initial 512-byte allocation.\n\nThe base64 decoder could read past the buffer end on trailing newlines.\n\nstrtok mutated n-\u003etype_id in place, corrupting shared node data.\n\nA memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming anchor string 'a' was leaked on early return.","status":"published","published":"2026-03-16T23:16:21.543Z","modified":"2026-10-01T02:17:49.28560593Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"BELL-CVE-2026-4177","status":"published","published":"2026-03-17T06:08:51.204638Z","modified":"2026-03-29T07:15:19.457776Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:23.844435Z"},{"id":"CVE-2026-4177","title":"YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter","description":"YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter.\n\nThe heap overflow occurs when class names exceed the initial 512-byte allocation.\n\nThe base64 decoder could read past the buffer end on trailing newlines.\n\nstrtok mutated n-\u003etype_id in place, corrupting shared node data.\n\nA memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming anchor string 'a' was leaked on early return.","status":"published","published":"2026-03-16T22:30:25.367Z","modified":"2026-10-28T10:55:16.189981559Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:45:03.764807Z"},{"id":"DEBIAN-CVE-2026-4177","description":"YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter.  The heap overflow occurs when class names exceed the initial 512-byte allocation.  The base64 decoder could read past the buffer end on trailing newlines.  strtok mutated n-\u003etype_id in place, corrupting shared node data.  A memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming anchor string 'a' was leaked on early return.","status":"published","published":"2026-03-16T23:16:21.543Z","modified":"2026-10-01T03:03:04.719095434Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:54.892385Z"},{"id":"RHSA-2026:6470","title":"Red Hat Security Advisory: perl-YAML-Syck security update","status":"published","published":"2026-04-03T10:09:39Z","modified":"2026-06-28T12:03:33Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:8311","title":"Red Hat Security Advisory: perl-YAML-Syck security update","status":"published","published":"2026-04-16T10:22:51Z","modified":"2026-06-29T11:32:02Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:6470","title":"Important: perl-YAML-Syck security update","description":"This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data structures to YAML strings, and the other way around.\n\nSecurity Fix(es):\n\n* perl-YAML-Syck: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter (CVE-2026-4177)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-04-09T06:02:33.513118Z","modified":"2026-04-09T06:30:21.455134Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2026-4177","description":"YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on trailing newlines. strtok mutated n-\u003etype_id in place, corrupting shared node data. A memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming anchor string 'a' was leaked on early return.","status":"published","published":"2026-03-16T23:16:00Z","modified":"2026-10-17T12:58:15.700292008Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T16:56:18.393417Z"},{"id":"ALSA-2026:6470","title":"Important: perl-YAML-Syck security update","description":"This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data structures to YAML strings, and the other way around.  \n\nSecurity Fix(es):  \n\n  * perl-YAML-Syck: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter (CVE-2026-4177)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-04-02T00:00:00Z","modified":"2026-10-29T11:02:29.168639598Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"AZL-109508","title":"CVE-2026-4177 affecting package perl-YAML 1.30-2","description":"YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter.\n\nThe heap overflow occurs when class names exceed the initial 512-byte allocation.\n\nThe base64 decoder could read past the buffer end on trailing newlines.\n\nstrtok mutated n-\u003etype_id in place, corrupting shared node data.\n\nA memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming anchor string 'a' was leaked on early return.","status":"published","published":"2026-03-16T23:16:21Z","modified":"2026-10-27T05:36:16Z","updated_at":"2026-11-02T15:28:02.044071Z"},{"id":"AZL-79977","title":"CVE-2026-4177 affecting package perl-YAML-Syck 1.34-1","description":"YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter.\n\nThe heap overflow occurs when class names exceed the initial 512-byte allocation.\n\nThe base64 decoder could read past the buffer end on trailing newlines.\n\nstrtok mutated n-\u003etype_id in place, corrupting shared node data.\n\nA memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming anchor string 'a' was leaked on early return.","status":"published","published":"2026-03-16T23:16:21Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:24.800038Z"},{"id":"DSA-6175-1","title":"libyaml-syck-perl - security update","status":"published","published":"2026-03-22T00:00:00Z","modified":"2026-03-22T20:31:01.933436Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2026-0058","title":"Updated perl-YAML-Syck packages fix security vulnerabilities","description":"YAML::Syck versions through 1.36 for Perl has several potential security\nvulnerabilities including a high-severity heap buffer overflow in the\nYAML emitter. (CVE-2026-4177)\n","status":"published","published":"2026-03-19T18:04:37Z","modified":"2026-04-16T04:44:05.844911166Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:10551-1","title":"perl-YAML-Syck-1.440.0-1.1 on GA media","description":"These are all security issues fixed in the perl-YAML-Syck-1.440.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-15T00:00:00Z","modified":"2026-04-16T08:32:03.210904Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20771-1","title":"Security update for perl-YAML-Syck","description":"This update for perl-YAML-Syck fixes the following issues:\n\nChanges in perl-YAML-Syck:\n\n- updated to 1.450.0 (1.45)\n    [Bug Fixes]\n    - Fix: use syck_base64_free() to fix Windows \"Free to wrong pool\" crash\n      in base64 encode/decode buffers; also plugs a memory leak (PR #189)\n    - Fix: clear type tag on blessed scalar alias early-return so the stale\n      tag no longer leaks onto the next emitted item (GH #193, PR #194)\n    - Fix: negative float#base60 values produce wrong results; strip sign\n      before accumulating and avoid negative zero for portable\n      stringification (PR #191)\n    - Fix: prevent memory leaks when Load/LoadJSON croak on parse errors\n      (PR #192)\n    [Maintenance]\n    - Test: add coverage for SortKeys and JSON MaxDepth (PR #188)\n    - Test: add error handling coverage for LoadFile/DumpFile (PR #190)\n    - Update README\n\n- updated to 1.440.0 (1.44)\n    [Bug Fixes]\n    - Fix: positive hex and octal values parsed as 0 with ImplicitTyping\n      (PR #187)\n    - Fix: resolve uintptr_t redefinition error on Win64 MinGW\n      (PR #186)\n  1.43 Apr 01 2026\n    [Bug Fixes]\n    - Fix: prevent resource leaks on croak/early-return paths in Dump\n      (PR #161)\n    - Fix: prevent output SV leaks on croak in Dump/DumpFile callers\n      (PR #163)\n    - Fix: Load() in list context returns empty list for empty/undef input;\n      also applies to LoadBytes and LoadUTF8 (GH #164, PR #165)\n    - Fix: DumpCode serializes prototype string instead of code body\n      (PR #168)\n    - Fix: memory leak in !perl/scalar Load — newRV_inc should be\n      newRV_noinc (PR #170)\n    - Fix: add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl\n      (GH #175, PR #176)\n    - Fix: add TODO guard for eval_pv leak on Perl \u003c 5.14\n      (GH #179, PR #180)\n    - Fix: negative hex and octal values parsed as 0 with ImplicitTyping\n      (PR #183)\n    - Fix: negative int#base60 values produce unsigned wraparound (PR #185)\n    [Improvements]\n    - Modernize META_MERGE for CPANTS compliance (PR #162)\n    - Fix hash table size handling and remove compile warnings in syck_st\n      (PR #174)\n    [Maintenance]\n    - Restore TODO guard for Dump code leak test on Perl \u003c 5.26 (PR #167)\n    - Resolve 2010 TODO in perl_json_postprocess with test coverage\n      (PR #166)\n    - CI: upgrade actions to resolve Node.js 20 deprecation warnings\n      (PR #177)\n  1.42 Mar 27 2026\n    [Bug Fixes]\n    - Fix: replace strtok() with strpbrk() and fix sign-compare warnings in\n      perl_syck.h (PR #145)\n    - Fix: terminate plain scalars at document boundaries --- and ... (PR #150)\n    - Fix: skip %TAG and %YAML directives in document header (PR #151)\n    - Fix: plug SV leak when eval_pv croaks on bad perl/code blocks (PR #153)\n    - Fix: allow non-specific tag '!' before block scalars (GH #27, PR #102)\n    - Fix: remove spurious %type \u003cnodeId\u003e for indent_open in gram.y\n      (GH #157, PR #158)\n    - Fix: use modern bison %define api.prefix directive (GH #159, PR #160)\n    [Improvements]\n    - Implement YAML merge key (\u003c\u003c) support (PR #149)\n    [Maintenance]\n    - Remove dead Perl 5.6/5.8 version guards from test files (PR #146)\n    - Add YAML 1.0 spec compliance audit and coverage tests (PR #148)\n    - Add comprehensive round-trip tests for YAML 1.0 spec features (PR #152)\n    - Remove unneeded TODO in t/json-basic.t (PR #154)\n    - Add regex Dump/Load/round-trip tests to perl tag scheme (PR #155)\n    - Do not require a .y file to build YAML::Syck; add brew support for bison\n    - Don't ship docs/ directory in tarball\n  1.41 Mar 22 2026\n    [Bug Fixes]\n    - Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of\n      strtod() so that floats like -3.14 are not corrupted by double-precision\n      rounding artifacts (GH #140, PR #141)\n  1.39 Mar 21 2026\n    [Bug Fixes]\n    - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls (GH #138, PR #139)\n  1.38 Mar 20 2026\n    [Bug Fixes]\n    - Fix: escape solidus (/) as \\/ in JSON::Syck::Dump for XSS safety (GH #125, PR #130)\n    - Fix: anchor tracking for blessed scalar refs in Dump (GH #126, PR #131)\n    - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (PR #133)\n    - Fix: guard against NULL type from strtok in tag parsing (PR #135)\n    - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (PR #137)\n    [Improvements]\n    - Resolve TODO tests for empty/invalid YAML to match actual behavior (GH #127, PR #129)\n    [Maintenance]\n    - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (PR #129)\n    - Add comprehensive implicit type resolution test suite (PR #137)\n    - Update MANIFEST to include all unit tests\n    - Clean up test names to remove unnecessary numbering\n  1.37 Mar 18 2026\n    [Features]\n    - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH #51)\n    [Fixes]\n    - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH #67)\n      bsc#1259757\n    - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH #22)\n    - Fix _is_glob to recognize IO::Handle subclasses (GH #23)\n    - Fix memory leak when dumping filehandles (RT#41199, GH #42)\n    - Fix dumping of tied hashes (GH #31)\n    - Fix dumping strings starting with '...' as unquoted plain scalars (GH #34)\n    - Fix dumping strings with tabs and carriage returns as plain scalars (GH #59)\n    - Fix double-dash YAML parsing (RT#34073, GH #35)\n    - Fix extra newline after empty arrays/hashes in YAML output (GH #36)\n    - Remove trailing whitespace from YAML output lines (GH #37, #38, #39)\n    - Fix quoting of \\r and \\t in YAML output instead of emitting raw bytes (GH #40)\n    - Fix growing !!perl/regexp objects in roundtrips (GH #43)\n    - Fix quoted '=' being transformed into 'str' (GH #45)\n    - Fix backslash-space escape in double-quoted YAML strings (GH #61)\n    - Fix flow sequence comma separator not recognized without trailing space (GH #60)\n    - Fix wide character warning in DumpFile (GH #28)\n    - Fix inline arrays without space after comma (GH #25)\n    - Fix: quote strings matching YAML implicit types to prevent roundtrip failures (GH #26)\n    - Fix JSON::Syck::Dump to use JSON-valid \\uXXXX escapes in output (GH #21)\n    - Fix JSON::Syck::Load decoding of \\/ and \\uXXXX escape sequences (GH #30)\n    - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH #104)\n    - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH #98)\n    - Fix: handle JSON escape sequences in SingleQuote mode Load (GH #99)\n    - Fix: restore Perl 5.8 compatibility in test suite (GH #121)\n    - Fix: correct copy-paste error in Makefile.PL clean target (GH #101)\n    - Fix: correct $SortKeys POD default from false to true (GH #100)\n    - Fix: correct POD documentation errors (GH #103)\n    [Maintenance]\n    - Add C23-compatible function prototypes for GCC 15 compatibility (GH #112)\n    - Silence macOS compiler warnings (GH #92)\n    - Guard stdint.h include for portability (HP-UX 11.11) (GH #33)\n    - Guard stdint.h include in syck_st.h for portability (GH #24)\n    - Update ppport.h to 3.68\n    - Add regression tests for magical variable dumping (GH #32)\n    - CI: modernize GitHub Actions workflow (GH #123, #124)\n    - CI: add disttest job to validate MANIFEST completeness\n\n- updated to 1.360.0 (1.36)\n  1.36 Oct 10 2025\n  - Address memory corruption leading to 'str' value being set on empty keys\n    Thanks @timlegge\n    CVE-2025-11683 bsc#1252111\n  1.35 Oct 9 2025\n  - Address parsing error related to string detection on read for empty strings.\n","status":"published","published":"2026-05-19T14:01:13Z","modified":"2026-05-22T18:23:49.768746854Z","updated_at":"2026-11-02T16:58:41.463445Z"}]}}