gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

perlPackages.YAMLSyck: 1.34 -> 1.36

Browse Source 
Fixes CVE-2025-11683.

```
1.36 Oct 10 2025
- Address memory corruption leading to 'str' value being set on empty keys
  Thanks @timlegge
1.35 Oct 9 2025
- Address parsing error related to string detection on read for empty strings.
```

Fixes #475110
This commit is contained in:
Thomas Gerbet
2025-12-29 19:38:34 +01:00
parent 6d2d7a3be7
commit 68535984e6
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkgs/top-level/perl-packages.nix
+3 -3
View File
@@ -39171,10 +39171,10 @@ with self;
YAMLSyck = buildPerlPackage {
pname = "YAML-Syck";
version = "1.34";
version = "1.36";
src = fetchurl {
url = "mirror://cpan/authors/id/T/TO/TODDR/YAML-Syck-1.34.tar.gz";
hash = "sha256-zJFWzK69p5jr/i8xthnoBld/hg7RcEJi8X/608bjQVk=";
url = "mirror://cpan/authors/id/T/TO/TODDR/YAML-Syck-1.36.tar.gz";
hash = "sha256-Tc2dmzsM48ZaL/K5tMb/+LZJ/fJDv9fhiJVDvs25GlI=";
};
meta = {
description = "Fast, lightweight YAML loader and dumper";