Red Hat Security Advisory

RHSA-2026:6470

perl-YAML-Syck security update

Released 2026-04-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux CRB (v. 8) perl-YAML-Syck-1.30-6.el8_10

Fixes 1 record

TI-2026-03625 CVE-2026-4177 · GHSA-72r6-p2x3-g9gj

Heap-based buffer overflow in TODDR YAML::Syck

MEDIUM 46

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00455 Published 2026-03-16 Partial fix CWE-122