OPENSUSE-SU-2026:11299-1

Vulnerability from csaf_opensuse - Published: 2026-07-17 00:00 - Updated: 2026-09-17 17:15
Summary
perl-YAML-Syck-1.470.0-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: perl-YAML-Syck-1.470.0-1.1 on GA media
Description of the patch: These are all security issues fixed in the perl-YAML-Syck-1.470.0-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11299
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2026-13713
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2026-57075
Affected products
Recommended 4 products, the same list as for CVE-2026-13713
Threats
Impact critical
CVE-2026-57076
Affected products
Recommended 4 products, the same list as for CVE-2026-13713
Threats
Impact important
CVE-2026-57077
Affected products
Recommended 4 products, the same list as for CVE-2026-13713
Threats
Impact important
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "perl-YAML-Syck-1.470.0-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the perl-YAML-Syck-1.470.0-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-11299",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11299-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-13713 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-13713/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-57075 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-57075/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-57076 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-57076/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-57077 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-57077/"
      }
    ],
    "title": "perl-YAML-Syck-1.470.0-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-09-17T17:15:10Z",
      "generator": {
        "date": "2026-07-17T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:11299-1",
      "initial_release_date": "2026-07-17T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-07-17T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T20:19:52Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T21:22:16Z",
          "number": "3",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-17T17:15:10Z",
          "number": "4",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-Syck-0:1.470.0-1.1.aarch64",
                "product": {
                  "name": "perl-YAML-Syck-0:1.470.0-1.1.aarch64",
                  "product_id": "perl-YAML-Syck-0:1.470.0-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:toddr:yaml\\:1.470.0:syck:*:*:*:*:*:perl:*:*",
                    "purl": "pkg:rpm/suse/perl-YAML-Syck@1.470.0-1.1?arch=aarch64\u0026upstream=perl-YAML-Syck-0:1.470.0-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-Syck-0:1.470.0-1.1.ppc64le",
                "product": {
                  "name": "perl-YAML-Syck-0:1.470.0-1.1.ppc64le",
                  "product_id": "perl-YAML-Syck-0:1.470.0-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:toddr:yaml\\:1.470.0:syck:*:*:*:*:*:perl:*:*",
                    "purl": "pkg:rpm/suse/perl-YAML-Syck@1.470.0-1.1?arch=ppc64le\u0026upstream=perl-YAML-Syck-0:1.470.0-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-Syck-0:1.470.0-1.1.s390x",
                "product": {
                  "name": "perl-YAML-Syck-0:1.470.0-1.1.s390x",
                  "product_id": "perl-YAML-Syck-0:1.470.0-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:toddr:yaml\\:1.470.0:syck:*:*:*:*:*:perl:*:*",
                    "purl": "pkg:rpm/suse/perl-YAML-Syck@1.470.0-1.1?arch=s390x\u0026upstream=perl-YAML-Syck-0:1.470.0-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-Syck-0:1.470.0-1.1.x86_64",
                "product": {
                  "name": "perl-YAML-Syck-0:1.470.0-1.1.x86_64",
                  "product_id": "perl-YAML-Syck-0:1.470.0-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:toddr:yaml\\:1.470.0:syck:*:*:*:*:*:perl:*:*",
                    "purl": "pkg:rpm/suse/perl-YAML-Syck@1.470.0-1.1?arch=x86_64\u0026upstream=perl-YAML-Syck-0:1.470.0-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-Syck-0:1.470.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.aarch64"
        },
        "product_reference": "perl-YAML-Syck-0:1.470.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-Syck-0:1.470.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.ppc64le"
        },
        "product_reference": "perl-YAML-Syck-0:1.470.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-Syck-0:1.470.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.s390x"
        },
        "product_reference": "perl-YAML-Syck-0:1.470.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-Syck-0:1.470.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.x86_64"
        },
        "product_reference": "perl-YAML-Syck-0:1.470.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-13713",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-13713"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack.\n\nIn the bundled libsyck, when an anchor name is redefined or removed, syck_hdlr_add_anchor and syck_hdlr_remove_anchor free the node stored under that name with syck_free_node. That node can still be live on the parser\u0027s value stack, so syck_hdlr_add_node reaches it again and frees it a second time. On a normal build the 48-byte node chunk is freed twice and the interpreter aborts. Anchors need no special flags, so this is reached on the default Load path, and a 7-byte document that redefines an anchor triggers it.\n\nAny caller that runs Load or LoadFile on an untrusted document that redefines an anchor mid-parse crashes the interpreter, a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.aarch64",
          "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.ppc64le",
          "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.s390x",
          "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-13713",
          "url": "https://www.suse.com/security/cve/CVE-2026-13713"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271631 for CVE-2026-13713",
          "url": "https://bugzilla.suse.com/1271631"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.aarch64",
            "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.s390x",
            "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-17T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-13713"
    },
    {
      "cve": "CVE-2026-57075",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-57075"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syck_base64dec.\n\nThe base64 decoder in the bundled libsyck indexes the 256-entry static table b64_xtable with a signed char, so any !!binary byte \u003e= 0x80 sign-extends to a negative index and reads before the table. The decoder receives the raw bytes of any !!binary node, a standard YAML type not gated by $LoadBlessed or $LoadCode, so it is reached on the default Load path.\n\nAny caller that runs Load or LoadFile on an untrusted document containing a !!binary scalar with a high-bit byte triggers the read, and the value read can surface in the decoded result.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.aarch64",
          "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.ppc64le",
          "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.s390x",
          "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-57075",
          "url": "https://www.suse.com/security/cve/CVE-2026-57075"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271632 for CVE-2026-57075",
          "url": "https://bugzilla.suse.com/1271632"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.aarch64",
            "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.s390x",
            "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-17T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-57075"
    },
    {
      "cve": "CVE-2026-57076",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-57076"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syck_hdlr_add_anchor.\n\nIn the bundled libsyck an anchor name allocated by syck_strndup is stored both as node-\u003eanchor, freed when the node is freed, and as the key in the parser\u0027s anchors table. Freeing the node frees the shared key, and a later anchor redefinition makes st_delete compare against the freed key, so st_strcmp reads freed heap memory. Anchors are a standard YAML feature and need no special flags, so this is reached on the default Load path.\n\nAny caller that runs Load or LoadFile on an untrusted document that redefines an anchor reaches the read of freed memory.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.aarch64",
          "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.ppc64le",
          "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.s390x",
          "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-57076",
          "url": "https://www.suse.com/security/cve/CVE-2026-57076"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271633 for CVE-2026-57076",
          "url": "https://bugzilla.suse.com/1271633"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.aarch64",
            "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.s390x",
            "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-57076"
    },
    {
      "cve": "CVE-2026-57077",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-57077"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len.\n\nIn the bundled libsyck newline_len and is_newline dereference the scan pointer, and the following byte for a \"\\r\\n\" pair, with no NUL-terminator or bounds check. During block-scalar lexing at a document boundary the scan runs one byte past the heap lexer buffer. This is an incomplete fix of CVE-2025-11683, on a lexer path the earlier fix did not cover.\n\nAny caller that runs Load or LoadFile on an untrusted document with a block scalar at a document boundary reaches the over-read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.aarch64",
          "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.ppc64le",
          "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.s390x",
          "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-57077",
          "url": "https://www.suse.com/security/cve/CVE-2026-57077"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1252111 for CVE-2026-57077",
          "url": "https://bugzilla.suse.com/1252111"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271634 for CVE-2026-57077",
          "url": "https://bugzilla.suse.com/1271634"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.aarch64",
            "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.ppc64le",
            "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.s390x",
            "openSUSE Tumbleweed:perl-YAML-Syck-0:1.470.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-57077"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.