Package: libfyaml0
Version: 0.8-1+b2
Severity: serious
Tags: upstream

Hi!
The version of libfyaml in Debian contains a pretty nasty bug that
destroys some UTF-8 characters and, if that ends in a null-byte, even
ends streaming data entirely for a specific YAML value. This affects
AppStream in Debian and on Debian's servers, so upgrading this package
would be very important.

I have not bisected which change exactly fixed this issue, because
there have been many utf8-related changes in libfyaml 0.9. However, I
would bet that it's these two:
https://github.com/pantoniou/libfyaml/commit/13d765ddcbea11c50d8fa5a4b2edb24ba2cc104a
https://github.com/pantoniou/libfyaml/commit/a0b780ca24111bc8a7afcd0477e5559379bf69e2

It would be nice to get this fixed, as it yields pretty badly
corrupted data. I have verified that libfyaml 0.9 indeed resolves the
issue.

Cheers,
    Matthias

-- System Information:
Debian Release: forky/sid
 APT prefers testing
 APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.16.7+deb14-amd64 (SMP w/24 CPU threads; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libfyaml0 depends on:
ii  libc6  2.41-12

libfyaml0 recommends no packages.

libfyaml0 suggests no packages.

-- no debconf information

Reply via email to