Red Hat Security Advisory

RHSA-2026:8311

perl-YAML-Syck security update

Released 2026-04-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server Optional (v. 7 ELS) perl-YAML-Syck-1.27-3.el7_9.1

Fixes 1 record

TI-2026-03625 CVE-2026-4177 · GHSA-72r6-p2x3-g9gj

Heap-based buffer overflow in TODDR YAML::Syck

MEDIUM 46

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00455 Published 2026-03-16 Partial fix CWE-122