https://bugzilla.redhat.com/show_bug.cgi?id=2501650
Bug ID: 2501650
Summary: CVE-2026-57075 perl-YAML-Syck: YAML::Syck: Information
disclosure via out-of-bounds read in base64 decoder
[epel-all]
Product: Fedora EPEL
Version: epel10
Status: NEW
Whiteboard: {"flaws": ["9793ef10-afc4-49b7-97df-d95df8d13cc7"]}
Component: perl-YAML-Syck
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
CC: [email protected], [email protected],
[email protected]
Blocks: 2501586
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a
signed-char lookup-table index in syck_base64dec.
The base64 decoder in the bundled libsyck indexes the 256-entry static table
b64_xtable with a signed char, so any !!binary byte >= 0x80 sign-extends to a
negative index and reads before the table. The decoder receives the raw bytes
of any !!binary node, a standard YAML type not gated by $LoadBlessed or
$LoadCode, so it is reached on the default Load path.
Any caller that runs Load or LoadFile on an untrusted document containing a
!!binary scalar with a high-bit byte triggers the read, and the value read can
surface in the decoded result.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2501650
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202501650%23c0
--
_______________________________________________
perl-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
