From 68535984e661cd041de91066b3118768fbb4d69f Mon Sep 17 00:00:00 2001
From: Thomas Gerbet <thomas@gerbet.me>
Date: Mon, 29 Dec 2025 19:38:34 +0100
Subject: [PATCH] perlPackages.YAMLSyck: 1.34 -> 1.36

Fixes CVE-2025-11683.

```
1.36 Oct 10 2025
- Address memory corruption leading to 'str' value being set on empty keys
  Thanks @timlegge
1.35 Oct 9 2025
- Address parsing error related to string detection on read for empty strings.
```

Fixes #475110
---
 pkgs/top-level/perl-packages.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkgs/top-level/perl-packages.nix b/pkgs/top-level/perl-packages.nix
index 61d5ed7e05ee..5488c550455b 100644
--- a/pkgs/top-level/perl-packages.nix
+++ b/pkgs/top-level/perl-packages.nix
@@ -39171,10 +39171,10 @@ with self;
 
   YAMLSyck = buildPerlPackage {
     pname = "YAML-Syck";
-    version = "1.34";
+    version = "1.36";
     src = fetchurl {
-      url = "mirror://cpan/authors/id/T/TO/TODDR/YAML-Syck-1.34.tar.gz";
-      hash = "sha256-zJFWzK69p5jr/i8xthnoBld/hg7RcEJi8X/608bjQVk=";
+      url = "mirror://cpan/authors/id/T/TO/TODDR/YAML-Syck-1.36.tar.gz";
+      hash = "sha256-Tc2dmzsM48ZaL/K5tMb/+LZJ/fJDv9fhiJVDvs25GlI=";
     };
     meta = {
       description = "Fast, lightweight YAML loader and dumper";