ELSA-2026-93471

ELSA-2026-93471 - perl-YAML:1.24 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-11-04

Description

perl-YAML
[1.24-4]
- CVE-2017-20285 perl-YAML:1.24/perl-YAML: perl-yaml: Arbitrary destructor
method execution via crafted YAML document destructor method execution via
crafted YAML document
- CVE-2019-25777 perl-YAML:1.24/perl-YAML: perl-yaml: Arbitrary code
execution via unrestricted package variable assignment

[1.24-3]
- Rebuild with enable hardening (bug #1636329)

[1.24-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.24-1]
- Update to 1.24
- Fix (GH#180, GH#181, GH#182)
- This release by TINITA -> update source URL
- Drop redundant Group: tag

[1.23-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.23-3]
- Perl 5.26 re-rebuild of bootstrapped packages

[1.23-2]
- Perl 5.26 rebuild

[1.23-1]
- Update to 1.23
- Fix ::Numify (empty values were converted to 0)

[1.22-1]
- Update to 1.22
- Add ::Numify

[1.21-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

perl-YAML
[1.24-4]
- CVE-2017-20285 perl-YAML:1.24/perl-YAML: perl-yaml: Arbitrary destructor
method execution via crafted YAML document destructor method execution via
crafted YAML document
- CVE-2019-25777 perl-YAML:1.24/perl-YAML: perl-yaml: Arbitrary code
execution via unrestricted package variable assignment

[1.24-3]
- Rebuild with enable hardening (bug #1636329)

[1.24-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.24-1]
- Update to 1.24
- Fix (GH#180, GH#181, GH#182)
- This release by TINITA -> update source URL
- Drop redundant Group: tag

[1.23-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.23-3]
- Perl 5.26 re-rebuild of bootstrapped packages

[1.23-2]
- Perl 5.26 rebuild

[1.23-1]
- Update to 1.23
- Fix ::Numify (empty values were converted to 0)

[1.22-1]
- Update to 1.22
- Add ::Numify

[1.21-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

Related CVEs

CVE-2017-20285

CVE-2019-25777

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	perl-YAML-1.24-4.module+el8.10.0+91104+33aeb071.src.rpm	ad321f4e2c9d4a14ad315974277abcda41996063342ab749f792c7af2c56b9b0	-	ol8_aarch64_appstream
	perl-YAML-1.24-4.module+el8.10.0+91104+f3b3492f.src.rpm	bee54c12685e05931a1a2c5740578b332201afff783f50e905a20154747e0f4e	-	ol8_aarch64_appstream
	perl-YAML-1.24-4.module+el8.10.0+91104+33aeb071.noarch.rpm	d8a757b4cbfab25225fad35d3b8c1a24eb784c42a53bdc15571c2d2e9d55d8a8	-	ol8_aarch64_appstream
	perl-YAML-1.24-4.module+el8.10.0+91104+f3b3492f.noarch.rpm	3fdb5b47f66caefba71a8283efc59b08a4cc453c5546e6e42dd8cf6a704c1d08	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	perl-YAML-1.24-4.module+el8.10.0+91104+33aeb071.src.rpm	ad321f4e2c9d4a14ad315974277abcda41996063342ab749f792c7af2c56b9b0	-	ol8_x86_64_appstream
	perl-YAML-1.24-4.module+el8.10.0+91104+f3b3492f.src.rpm	bee54c12685e05931a1a2c5740578b332201afff783f50e905a20154747e0f4e	-	ol8_x86_64_appstream
	perl-YAML-1.24-4.module+el8.10.0+91104+33aeb071.noarch.rpm	d8a757b4cbfab25225fad35d3b8c1a24eb784c42a53bdc15571c2d2e9d55d8a8	-	ol8_x86_64_appstream
	perl-YAML-1.24-4.module+el8.10.0+91104+f3b3492f.noarch.rpm	3fdb5b47f66caefba71a8283efc59b08a4cc453c5546e6e42dd8cf6a704c1d08	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team