USN-7632-1: YAML-LibYAML vulnerability

USN-7632-1: YAML-LibYAML vulnerability
Publication date: 9 July 2025
Overview: YAML-LibYAML could be made to overwrite files.

Packages
libyaml-libyaml-perl - Perl interface to libyaml, a YAML implementation

Details
It was discovered that YAML-LibYAML incorrectly handled certain file
names. An attacker could possibly use this issue to overwrite arbitrary
files.

Update instructions
The problem can be corrected by updating your system to the following package versions:

• 24.04 noble: libyaml-libyaml-perl – 0.89+ds-1ubuntu0.24.04.1
• 22.04 jammy: libyaml-libyaml-perl – 0.83+ds-1ubuntu0.22.04.1