perl-YAML-Syck-1.30-6.el8_10
エラータID: AXSA:2026-405:01
リリース日:
2026/04/06 Monday - 15:12
題名:
perl-YAML-Syck-1.30-6.el8_10
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- Perl の YAML::Syck モジュールには、バッファオーバーフローの
問題があるため、リモートの攻撃者により、情報の漏洩、データ破壊、
およびサービス拒否攻撃を可能とする脆弱性が存在します。
(CVE-2026-4177)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2026-4177
YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on trailing newlines. strtok mutated n->type_id in place, corrupting shared node data. A memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming anchor string 'a' was leaked on early return.
YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on trailing newlines. strtok mutated n->type_id in place, corrupting shared node data. A memory leak occurred in syck_hdlr_add_anchor when a node already had an anchor. The incoming anchor string 'a' was leaked on early return.
追加情報:
N/A
ダウンロード:
SRPMS
- perl-YAML-Syck-1.30-6.el8_10.src.rpm
MD5: 6968d3473d08a0e01a70bce223975b05
SHA-256: cf7dfc4ad117a3689371c2a6c2302550a892536fee8a31c4647bc65003d0a945
Size: 187.88 kB
Asianux Server 8 for x86_64
- perl-YAML-Syck-1.30-6.el8_10.x86_64.rpm
MD5: 2bddca2ea5e880969ec3cbd6eaa0dfee
SHA-256: 6d6bb2d3289ccda0966c0847593303c05bdc30b753e37cf3228194d0eba28272
Size: 94.92 kB
English