BSD Ports

textproc/p5-YAML-Syck 1.47 NetBSD

Fast, lightweight YAML loader and dumper

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
9b2f6c6d38
License
mit AND 2-clause-bsd
Categories
textproc, perl5
Package size
64.0 KiB, 189.7 KiB installed

Description

YAML::Syck provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data structures to YAML strings, and the other way around.

In the other systems

SystemPortVersion
NetBSDtextproc/p5-YAML-Syck1.47
FreeBSDtextproc/p5-YAML-Syck1.47
OpenBSDdevel/p5-YAML-Syck1.47
DragonFlytextproc/p5-YAML-Syck1.34_1
HardenedBSDtextproc/p5-YAML-Syck1.47
GhostBSDtextproc/p5-YAML-Syck1.36

Install

Binary package:

pkgin install p5-YAML-Syck

From pkgsrc:

cd /usr/pkgsrc/textproc/p5-YAML-Syck && make install clean

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

RepositoryVersion
NetBSD 10.1 x86_641.47
NetBSD 10.1 aarch641.47
SmartOS / illumos x86_641.47
macOS 15 arm641.47

Dependencies

Run dependencies 1

Commit history 2

DateCommitCreditsLog message
9b2f6c6d38 wiz p5-YAML-Syck: update to 1.47.
1.47 Jul 13 2026 [Security] - Fix four libsyck memory-safety CVEs reachable from the default YAML::Syck::Load() path on untrusted input with no special flags (reported by Paul Johnson via CPANSec, PR #213): - CVE-2026-57075 (CWE-125): out-of-bounds read in the base64 decoder caused by signed-char indexing of the decode table on !!binary input - CVE-2026-57076 (CWE-416): use-after-free of an anchor key string shared between the node and the anchors table - CVE-2026-57077 (CWE-125): one-byte out-of-bounds read in the lexer newline scan during block-scalar parsing (incomplete-fix follow-on to CVE-2025-11683) - CVE-2026-13713 (CWE-416/CWE-415): use-after-free / double-free of an …
618415630a wiz *: recursive bump for perl5 5.44.0