Bug#862475: The State of the YAML

[Ivo De Decker]

Control: tags -1 buster-ignore

Hi,

On Fri, May 18, 2018 at 11:09:23AM +0200, gregor herrmann wrote:
> Quick status update on the perl YAML modules and the problem of
> instantiating objects:
> 
> * libyaml-syck-perl has $YAML::LoadBlessed since a long time
> * libyaml-libyaml-perl since 0.69 and libyaml-perl since 1.25 have
>   added $YAML::LoadBlessed as well
> * all three by default set it to 1 
> 
> (and YAML::Tiny is not affected as far as I know)
> 
> So I guess we have to consider if we're happy with the ability to
> turn off loading objects and recommend it to consumers and close the
> bugs; or if we want to change the defaults, which means setting
> $YAML::LoadBlessed to 0 in all three packages.

I guess it might be best to change the default, but that's obviously too late
for buster. If this options is chosen, it should probably be done soon after
the buster release, to allow for plenty of time for issues to be discovered
(and fixed) for bullseye.

Thanks,

Ivo