dwww Home | Show directory contents | Find package

libyaml-syck-perl (1.32-1) unstable; urgency=medium

  YAML::Syck 1.32 sets the default for $YAML::Syck::LoadBlessed to false in
  order to avoid loading untrusted objects, which can be a security
  vulnerability.

  Cf. http://blogs.perl.org/users/tinita/2020/01/making-yamlpm-yamlsyck-and-yamlxs-safer-by-default.html
  for background information and hints for handling this change.

 -- gregor herrmann <gregoa@debian.org>  Wed, 29 Jan 2020 12:23:39 +0100

Generated by dwww version 1.15 on Sun Jun 16 15:53:10 CEST 2024.