OPENSUSE-SU-2026:20771-1

Vulnerability from csaf_opensuse - Published: 2026-05-19 14:01 - Updated: 2026-09-17 17:32
Summary
Security update for perl-YAML-Syck
Severity
Critical
Notes
Title of the patch: Security update for perl-YAML-Syck
Description of the patch: This update for perl-YAML-Syck fixes the following issues: Changes in perl-YAML-Syck: - updated to 1.450.0 (1.45) [Bug Fixes] - Fix: use syck_base64_free() to fix Windows "Free to wrong pool" crash in base64 encode/decode buffers; also plugs a memory leak (PR #189) - Fix: clear type tag on blessed scalar alias early-return so the stale tag no longer leaks onto the next emitted item (GH #193, PR #194) - Fix: negative float#base60 values produce wrong results; strip sign before accumulating and avoid negative zero for portable stringification (PR #191) - Fix: prevent memory leaks when Load/LoadJSON croak on parse errors (PR #192) [Maintenance] - Test: add coverage for SortKeys and JSON MaxDepth (PR #188) - Test: add error handling coverage for LoadFile/DumpFile (PR #190) - Update README - updated to 1.440.0 (1.44) [Bug Fixes] - Fix: positive hex and octal values parsed as 0 with ImplicitTyping (PR #187) - Fix: resolve uintptr_t redefinition error on Win64 MinGW (PR #186) 1.43 Apr 01 2026 [Bug Fixes] - Fix: prevent resource leaks on croak/early-return paths in Dump (PR #161) - Fix: prevent output SV leaks on croak in Dump/DumpFile callers (PR #163) - Fix: Load() in list context returns empty list for empty/undef input; also applies to LoadBytes and LoadUTF8 (GH #164, PR #165) - Fix: DumpCode serializes prototype string instead of code body (PR #168) - Fix: memory leak in !perl/scalar Load — newRV_inc should be newRV_noinc (PR #170) - Fix: add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl (GH #175, PR #176) - Fix: add TODO guard for eval_pv leak on Perl < 5.14 (GH #179, PR #180) - Fix: negative hex and octal values parsed as 0 with ImplicitTyping (PR #183) - Fix: negative int#base60 values produce unsigned wraparound (PR #185) [Improvements] - Modernize META_MERGE for CPANTS compliance (PR #162) - Fix hash table size handling and remove compile warnings in syck_st (PR #174) [Maintenance] - Restore TODO guard for Dump code leak test on Perl < 5.26 (PR #167) - Resolve 2010 TODO in perl_json_postprocess with test coverage (PR #166) - CI: upgrade actions to resolve Node.js 20 deprecation warnings (PR #177) 1.42 Mar 27 2026 [Bug Fixes] - Fix: replace strtok() with strpbrk() and fix sign-compare warnings in perl_syck.h (PR #145) - Fix: terminate plain scalars at document boundaries --- and ... (PR #150) - Fix: skip %TAG and %YAML directives in document header (PR #151) - Fix: plug SV leak when eval_pv croaks on bad perl/code blocks (PR #153) - Fix: allow non-specific tag '!' before block scalars (GH #27, PR #102) - Fix: remove spurious %type <nodeId> for indent_open in gram.y (GH #157, PR #158) - Fix: use modern bison %define api.prefix directive (GH #159, PR #160) [Improvements] - Implement YAML merge key (<<) support (PR #149) [Maintenance] - Remove dead Perl 5.6/5.8 version guards from test files (PR #146) - Add YAML 1.0 spec compliance audit and coverage tests (PR #148) - Add comprehensive round-trip tests for YAML 1.0 spec features (PR #152) - Remove unneeded TODO in t/json-basic.t (PR #154) - Add regex Dump/Load/round-trip tests to perl tag scheme (PR #155) - Do not require a .y file to build YAML::Syck; add brew support for bison - Don't ship docs/ directory in tarball 1.41 Mar 22 2026 [Bug Fixes] - Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of strtod() so that floats like -3.14 are not corrupted by double-precision rounding artifacts (GH #140, PR #141) 1.39 Mar 21 2026 [Bug Fixes] - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls (GH #138, PR #139) 1.38 Mar 20 2026 [Bug Fixes] - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety (GH #125, PR #130) - Fix: anchor tracking for blessed scalar refs in Dump (GH #126, PR #131) - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (PR #133) - Fix: guard against NULL type from strtok in tag parsing (PR #135) - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (PR #137) [Improvements] - Resolve TODO tests for empty/invalid YAML to match actual behavior (GH #127, PR #129) [Maintenance] - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (PR #129) - Add comprehensive implicit type resolution test suite (PR #137) - Update MANIFEST to include all unit tests - Clean up test names to remove unnecessary numbering 1.37 Mar 18 2026 [Features] - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH #51) [Fixes] - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH #67) bsc#1259757 - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH #22) - Fix _is_glob to recognize IO::Handle subclasses (GH #23) - Fix memory leak when dumping filehandles (RT#41199, GH #42) - Fix dumping of tied hashes (GH #31) - Fix dumping strings starting with '...' as unquoted plain scalars (GH #34) - Fix dumping strings with tabs and carriage returns as plain scalars (GH #59) - Fix double-dash YAML parsing (RT#34073, GH #35) - Fix extra newline after empty arrays/hashes in YAML output (GH #36) - Remove trailing whitespace from YAML output lines (GH #37, #38, #39) - Fix quoting of \r and \t in YAML output instead of emitting raw bytes (GH #40) - Fix growing !!perl/regexp objects in roundtrips (GH #43) - Fix quoted '=' being transformed into 'str' (GH #45) - Fix backslash-space escape in double-quoted YAML strings (GH #61) - Fix flow sequence comma separator not recognized without trailing space (GH #60) - Fix wide character warning in DumpFile (GH #28) - Fix inline arrays without space after comma (GH #25) - Fix: quote strings matching YAML implicit types to prevent roundtrip failures (GH #26) - Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH #21) - Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH #30) - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH #104) - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH #98) - Fix: handle JSON escape sequences in SingleQuote mode Load (GH #99) - Fix: restore Perl 5.8 compatibility in test suite (GH #121) - Fix: correct copy-paste error in Makefile.PL clean target (GH #101) - Fix: correct $SortKeys POD default from false to true (GH #100) - Fix: correct POD documentation errors (GH #103) [Maintenance] - Add C23-compatible function prototypes for GCC 15 compatibility (GH #112) - Silence macOS compiler warnings (GH #92) - Guard stdint.h include for portability (HP-UX 11.11) (GH #33) - Guard stdint.h include in syck_st.h for portability (GH #24) - Update ppport.h to 3.68 - Add regression tests for magical variable dumping (GH #32) - CI: modernize GitHub Actions workflow (GH #123, #124) - CI: add disttest job to validate MANIFEST completeness - updated to 1.360.0 (1.36) 1.36 Oct 10 2025 - Address memory corruption leading to 'str' value being set on empty keys Thanks @timlegge CVE-2025-11683 bsc#1252111 1.35 Oct 9 2025 - Address parsing error related to string detection on read for empty strings.
Patchnames: openSUSE-Leap-16.0-packagehub-263
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2025-11683
6.5 (Medium)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2026-4177
Affected products
Recommended 4 products, the same list as for CVE-2025-11683
Threats
Impact critical
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for perl-YAML-Syck",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for perl-YAML-Syck fixes the following issues:\n\nChanges in perl-YAML-Syck:\n\n- updated to 1.450.0 (1.45)\n    [Bug Fixes]\n    - Fix: use syck_base64_free() to fix Windows \"Free to wrong pool\" crash\n      in base64 encode/decode buffers; also plugs a memory leak (PR #189)\n    - Fix: clear type tag on blessed scalar alias early-return so the stale\n      tag no longer leaks onto the next emitted item (GH #193, PR #194)\n    - Fix: negative float#base60 values produce wrong results; strip sign\n      before accumulating and avoid negative zero for portable\n      stringification (PR #191)\n    - Fix: prevent memory leaks when Load/LoadJSON croak on parse errors\n      (PR #192)\n    [Maintenance]\n    - Test: add coverage for SortKeys and JSON MaxDepth (PR #188)\n    - Test: add error handling coverage for LoadFile/DumpFile (PR #190)\n    - Update README\n\n- updated to 1.440.0 (1.44)\n    [Bug Fixes]\n    - Fix: positive hex and octal values parsed as 0 with ImplicitTyping\n      (PR #187)\n    - Fix: resolve uintptr_t redefinition error on Win64 MinGW\n      (PR #186)\n  1.43 Apr 01 2026\n    [Bug Fixes]\n    - Fix: prevent resource leaks on croak/early-return paths in Dump\n      (PR #161)\n    - Fix: prevent output SV leaks on croak in Dump/DumpFile callers\n      (PR #163)\n    - Fix: Load() in list context returns empty list for empty/undef input;\n      also applies to LoadBytes and LoadUTF8 (GH #164, PR #165)\n    - Fix: DumpCode serializes prototype string instead of code body\n      (PR #168)\n    - Fix: memory leak in !perl/scalar Load \u2014 newRV_inc should be\n      newRV_noinc (PR #170)\n    - Fix: add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl\n      (GH #175, PR #176)\n    - Fix: add TODO guard for eval_pv leak on Perl \u003c 5.14\n      (GH #179, PR #180)\n    - Fix: negative hex and octal values parsed as 0 with ImplicitTyping\n      (PR #183)\n    - Fix: negative int#base60 values produce unsigned wraparound (PR #185)\n    [Improvements]\n    - Modernize META_MERGE for CPANTS compliance (PR #162)\n    - Fix hash table size handling and remove compile warnings in syck_st\n      (PR #174)\n    [Maintenance]\n    - Restore TODO guard for Dump code leak test on Perl \u003c 5.26 (PR #167)\n    - Resolve 2010 TODO in perl_json_postprocess with test coverage\n      (PR #166)\n    - CI: upgrade actions to resolve Node.js 20 deprecation warnings\n      (PR #177)\n  1.42 Mar 27 2026\n    [Bug Fixes]\n    - Fix: replace strtok() with strpbrk() and fix sign-compare warnings in\n      perl_syck.h (PR #145)\n    - Fix: terminate plain scalars at document boundaries --- and ... (PR #150)\n    - Fix: skip %TAG and %YAML directives in document header (PR #151)\n    - Fix: plug SV leak when eval_pv croaks on bad perl/code blocks (PR #153)\n    - Fix: allow non-specific tag \u0027!\u0027 before block scalars (GH #27, PR #102)\n    - Fix: remove spurious %type \u003cnodeId\u003e for indent_open in gram.y\n      (GH #157, PR #158)\n    - Fix: use modern bison %define api.prefix directive (GH #159, PR #160)\n    [Improvements]\n    - Implement YAML merge key (\u003c\u003c) support (PR #149)\n    [Maintenance]\n    - Remove dead Perl 5.6/5.8 version guards from test files (PR #146)\n    - Add YAML 1.0 spec compliance audit and coverage tests (PR #148)\n    - Add comprehensive round-trip tests for YAML 1.0 spec features (PR #152)\n    - Remove unneeded TODO in t/json-basic.t (PR #154)\n    - Add regex Dump/Load/round-trip tests to perl tag scheme (PR #155)\n    - Do not require a .y file to build YAML::Syck; add brew support for bison\n    - Don\u0027t ship docs/ directory in tarball\n  1.41 Mar 22 2026\n    [Bug Fixes]\n    - Fix float parsing on -Dusequadmath perls: use Perl\u0027s Atof() instead of\n      strtod() so that floats like -3.14 are not corrupted by double-precision\n      rounding artifacts (GH #140, PR #141)\n  1.39 Mar 21 2026\n    [Bug Fixes]\n    - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls (GH #138, PR #139)\n  1.38 Mar 20 2026\n    [Bug Fixes]\n    - Fix: escape solidus (/) as \\/ in JSON::Syck::Dump for XSS safety (GH #125, PR #130)\n    - Fix: anchor tracking for blessed scalar refs in Dump (GH #126, PR #131)\n    - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (PR #133)\n    - Fix: guard against NULL type from strtok in tag parsing (PR #135)\n    - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (PR #137)\n    [Improvements]\n    - Resolve TODO tests for empty/invalid YAML to match actual behavior (GH #127, PR #129)\n    [Maintenance]\n    - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (PR #129)\n    - Add comprehensive implicit type resolution test suite (PR #137)\n    - Update MANIFEST to include all unit tests\n    - Clean up test names to remove unnecessary numbering\n  1.37 Mar 18 2026\n    [Features]\n    - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH #51)\n    [Fixes]\n    - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH #67)\n      bsc#1259757\n    - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH #22)\n    - Fix _is_glob to recognize IO::Handle subclasses (GH #23)\n    - Fix memory leak when dumping filehandles (RT#41199, GH #42)\n    - Fix dumping of tied hashes (GH #31)\n    - Fix dumping strings starting with \u0027...\u0027 as unquoted plain scalars (GH #34)\n    - Fix dumping strings with tabs and carriage returns as plain scalars (GH #59)\n    - Fix double-dash YAML parsing (RT#34073, GH #35)\n    - Fix extra newline after empty arrays/hashes in YAML output (GH #36)\n    - Remove trailing whitespace from YAML output lines (GH #37, #38, #39)\n    - Fix quoting of \\r and \\t in YAML output instead of emitting raw bytes (GH #40)\n    - Fix growing !!perl/regexp objects in roundtrips (GH #43)\n    - Fix quoted \u0027=\u0027 being transformed into \u0027str\u0027 (GH #45)\n    - Fix backslash-space escape in double-quoted YAML strings (GH #61)\n    - Fix flow sequence comma separator not recognized without trailing space (GH #60)\n    - Fix wide character warning in DumpFile (GH #28)\n    - Fix inline arrays without space after comma (GH #25)\n    - Fix: quote strings matching YAML implicit types to prevent roundtrip failures (GH #26)\n    - Fix JSON::Syck::Dump to use JSON-valid \\uXXXX escapes in output (GH #21)\n    - Fix JSON::Syck::Load decoding of \\/ and \\uXXXX escape sequences (GH #30)\n    - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH #104)\n    - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH #98)\n    - Fix: handle JSON escape sequences in SingleQuote mode Load (GH #99)\n    - Fix: restore Perl 5.8 compatibility in test suite (GH #121)\n    - Fix: correct copy-paste error in Makefile.PL clean target (GH #101)\n    - Fix: correct $SortKeys POD default from false to true (GH #100)\n    - Fix: correct POD documentation errors (GH #103)\n    [Maintenance]\n    - Add C23-compatible function prototypes for GCC 15 compatibility (GH #112)\n    - Silence macOS compiler warnings (GH #92)\n    - Guard stdint.h include for portability (HP-UX 11.11) (GH #33)\n    - Guard stdint.h include in syck_st.h for portability (GH #24)\n    - Update ppport.h to 3.68\n    - Add regression tests for magical variable dumping (GH #32)\n    - CI: modernize GitHub Actions workflow (GH #123, #124)\n    - CI: add disttest job to validate MANIFEST completeness\n\n- updated to 1.360.0 (1.36)\n  1.36 Oct 10 2025\n  - Address memory corruption leading to \u0027str\u0027 value being set on empty keys\n    Thanks @timlegge\n    CVE-2025-11683 bsc#1252111\n  1.35 Oct 9 2025\n  - Address parsing error related to string detection on read for empty strings.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-packagehub-263",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_20771-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1252111",
        "url": "https://bugzilla.suse.com/1252111"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259757",
        "url": "https://bugzilla.suse.com/1259757"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11683 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11683/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4177 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4177/"
      }
    ],
    "title": "Security update for perl-YAML-Syck",
    "tracking": {
      "current_release_date": "2026-09-17T17:32:52Z",
      "generator": {
        "date": "2026-05-19T14:01:13Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:20771-1",
      "initial_release_date": "2026-05-19T14:01:13Z",
      "revision_history": [
        {
          "date": "2026-05-19T14:01:13Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-05-19T14:01:13Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T20:35:12Z",
          "number": "3",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T21:38:13Z",
          "number": "4",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-17T17:32:52Z",
          "number": "5",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "5"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-Syck-0:1.450.0-bp160.1.1.aarch64",
                "product": {
                  "name": "perl-YAML-Syck-0:1.450.0-bp160.1.1.aarch64",
                  "product_id": "perl-YAML-Syck-0:1.450.0-bp160.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:toddr:yaml\\:1.450.0:syck:*:*:*:*:*:perl:*:*",
                    "purl": "pkg:rpm/suse/perl-YAML-Syck@1.450.0-bp160.1.1?arch=aarch64\u0026upstream=perl-YAML-Syck-0:1.450.0-bp160.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-Syck-0:1.450.0-bp160.1.1.ppc64le",
                "product": {
                  "name": "perl-YAML-Syck-0:1.450.0-bp160.1.1.ppc64le",
                  "product_id": "perl-YAML-Syck-0:1.450.0-bp160.1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:toddr:yaml\\:1.450.0:syck:*:*:*:*:*:perl:*:*",
                    "purl": "pkg:rpm/suse/perl-YAML-Syck@1.450.0-bp160.1.1?arch=ppc64le\u0026upstream=perl-YAML-Syck-0:1.450.0-bp160.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-Syck-0:1.450.0-bp160.1.1.s390x",
                "product": {
                  "name": "perl-YAML-Syck-0:1.450.0-bp160.1.1.s390x",
                  "product_id": "perl-YAML-Syck-0:1.450.0-bp160.1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:toddr:yaml\\:1.450.0:syck:*:*:*:*:*:perl:*:*",
                    "purl": "pkg:rpm/suse/perl-YAML-Syck@1.450.0-bp160.1.1?arch=s390x\u0026upstream=perl-YAML-Syck-0:1.450.0-bp160.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-YAML-Syck-0:1.450.0-bp160.1.1.x86_64",
                "product": {
                  "name": "perl-YAML-Syck-0:1.450.0-bp160.1.1.x86_64",
                  "product_id": "perl-YAML-Syck-0:1.450.0-bp160.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:toddr:yaml\\:1.450.0:syck:*:*:*:*:*:perl:*:*",
                    "purl": "pkg:rpm/suse/perl-YAML-Syck@1.450.0-bp160.1.1?arch=x86_64\u0026upstream=perl-YAML-Syck-0:1.450.0-bp160.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-Syck-0:1.450.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.aarch64"
        },
        "product_reference": "perl-YAML-Syck-0:1.450.0-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-Syck-0:1.450.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.ppc64le"
        },
        "product_reference": "perl-YAML-Syck-0:1.450.0-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-Syck-0:1.450.0-bp160.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.s390x"
        },
        "product_reference": "perl-YAML-Syck-0:1.450.0-bp160.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-YAML-Syck-0:1.450.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.x86_64"
        },
        "product_reference": "perl-YAML-Syck-0:1.450.0-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-11683",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11683"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "YAML::Syck versions before 1.36 for Perl has missing null-terminators which causes out-of-bounds read and potential information disclosure\n\nMissing null terminators in token.c leads to but-of-bounds read which allows adjacent variable to be read\n\nThe issue is seen with complex YAML files with a hash of all keys and empty values.   There is no indication that the issue leads to accessing memory outside that allocated to the module.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11683",
          "url": "https://www.suse.com/security/cve/CVE-2025-11683"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1252111 for CVE-2025-11683",
          "url": "https://bugzilla.suse.com/1252111"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271634 for CVE-2025-11683",
          "url": "https://bugzilla.suse.com/1271634"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-19T14:01:13Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-11683"
    },
    {
      "cve": "CVE-2026-4177",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4177"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter.\n\nThe heap overflow occurs when class names exceed the initial 512-byte allocation.\n\nThe base64 decoder could read past the buffer end on trailing newlines.\n\nstrtok mutated n-\u003etype_id in place, corrupting shared node data.\n\nA memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming anchor string \u0027a\u0027 was leaked on early return.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.s390x",
          "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4177",
          "url": "https://www.suse.com/security/cve/CVE-2026-4177"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259757 for CVE-2026-4177",
          "url": "https://bugzilla.suse.com/1259757"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275741 for CVE-2026-4177",
          "url": "https://bugzilla.suse.com/1275741"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.s390x",
            "openSUSE Leap 16.0:perl-YAML-Syck-0:1.450.0-bp160.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-19T14:01:13Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-4177"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.