Bug#894747: lintian: Re-enable YAML parsing for d/upstream/metadata files

To: submit@bugs.debian.org
Subject: Bug#894747: lintian: Re-enable YAML parsing for d/upstream/metadata files
From: Dylan Aïssi <bob.dybian@gmail.com>
Date: Tue, 3 Apr 2018 22:24:08 +0200
Message-id: <[🔎] CA+6XHwTEnrH=_to3+NEV_62J6BNpbzbByM-WGw+zQa8bLKjdmg@mail.gmail.com>
Reply-to: Dylan Aïssi <bob.dybian@gmail.com>, 894747@bugs.debian.org

Package: lintian
Version: 2.5.80
Severity: wishlist
Control: block 731340 by -1

Hi,

Currently, the lintian checks for validity of d/u/metadata are
disabled since 2.5.50.4 [1] due to a security problem [2]
(CVE-2017-8829), but now we can safety use YAML::XS with the
$LoadBlessed option [3]. I wondering if we can re-enable the
d/u/metadata checks in lintian using the safety method?

Best,
Dylan

[1] https://anonscm.debian.org/git/lintian/lintian.git/commit/checks/upstream-metadata.pm?id=6119d49c3b
[2] https://bugs.debian.org/861958
[3] https://bugs.debian.org/862373#59

Reply to:

Follow-Ups:
- Processed: lintian: Re-enable YAML parsing for d/upstream/metadata files
  - From: "Debian Bug Tracking System" <owner@bugs.debian.org>
- Bug#894747: lintian: Re-enable YAML parsing for d/upstream/metadata files
  - From: Chris Lamb <lamby@debian.org>
- Bug#894747: marked as done (lintian: Re-enable YAML parsing for d/upstream/metadata files)
  - From: "Debian Bug Tracking System" <owner@bugs.debian.org>

Prev by Date: Processed: lintian: Re-enable YAML parsing for d/upstream/metadata files
Next by Date: [lintian] branch master updated (cd397b8 -> b3fd60a)
Previous by thread: [lintian] 01/01: spelling: Add another correction
Next by thread: Processed: lintian: Re-enable YAML parsing for d/upstream/metadata files
Index(es):
- Date
- Thread