golang-gopkg-yaml.v3 3.0.1-1 source package in Ubuntu
Changelog
golang-gopkg-yaml.v3 (3.0.1-1) unstable; urgency=medium
* New upstream version 3.0.1
+ CVE-2022-28948 - crash when attempting to deserialize invalid input
Thanks to Neil William for the Debian bug report! (Closes: #1011338)
See also https://github.com/go-yaml/yaml/issues/666
* Change debian/watch to track v3 release tarballs
now that v3.0.0 and v3.0.1 have been released
* Reorder fields in debian/control and debian/copyright
* Update comment in debian/watch according to upstream LICENSE file
* Mark library package with "Multi-Arch: foreign"
* Bump Standards-Version to 4.6.1 (no change)
-- Anthony Fok <email address hidden> Mon, 13 Jun 2022 04:56:55 -0600
Upload details
- Uploaded by:
- Debian Go Packaging Team
- Uploaded to:
- Sid
- Original maintainer:
- Debian Go Packaging Team
- Architectures:
- all
- Section:
- golang
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| golang-gopkg-yaml.v3_3.0.1-1.dsc | 2.2 KiB | f3d721f4ee9d5903d1c3fac1e89f8e8a54e98dc4cb48cb8a1f878fd652fe998b |
| golang-gopkg-yaml.v3_3.0.1.orig.tar.gz | 89.0 KiB | cf05411540d3e6ef8f1fd88434b34f94cedaceb540329031d80e23b74540c4e5 |
| golang-gopkg-yaml.v3_3.0.1-1.debian.tar.xz | 4.3 KiB | 3e073f881a5927b5bd1b05cba3ceb6f4c3116dfc67aa012112160c81567b7261 |
Available diffs
No changes file available.
Binary packages built by this source
- golang-gopkg-yaml.v3-dev: YAML support for the Go language
The yaml package enables Go programs to very comfortably encode and decode
YAML values. It was developed within Canonical as part of the juju project,
and is based on a pure Go port of the well-known libyaml C library to parse
and generate YAML data quickly and reliably.
.
The yaml package supports most of YAML 1.2, but preserves some behavior from
1.1 for backwards compatibility.
.
Specifically, as of v3 of the yaml package:
.
* YAML 1.1 bools (yes/no, on/off) are supported as long as they are being
decoded into a typed bool value. Otherwise they behave as a string.
Booleans in YAML 1.2 are true/false only.
* Octals encode and decode as 0777 per YAML 1.1, rather than 0o777 as
specified in YAML 1.2, because most parsers still use the old format.
Octals in the 0o777 format are supported though, so new files work.
* Does not support base-60 floats. These are gone from YAML 1.2, and were
actually never supported by this package as it's clearly a poor choice.
.
and offers backwards compatibility with YAML 1.1 in some cases. 1.2,
including support for anchors, tags, map merging, etc. Multi-document
unmarshalling is not yet implemented, and base-60 floats from YAML 1.1 are
purposefully not supported since they're a poor design and are gone in YAML
1.2.
