Secure testing team - Jan 2009 - Freeze exception request for gnumeric

The gnumeric package currently in testing, 1.8.3-5, is a bit of a mess
(upstream 1.8.3 plus some updates from svn). It is affected by several
issues that are fixed in the sid version, 1.8.4-3, in particular #510929
(crash on old files), #509281 (?xcel charts import/export issue), and
#513418 (CVE-2009-0318).

A raw diff between the two versions is large, but this is largely due to
updated changelogs and generated files (Makefile.in, configure etc.); the
actual code changes are few but important.

Please consider allowing 1.8.4-3 into testing.

Ray
-- 
"Never trust a poll you haven''t rigged yourself."

J.H.M. Dassen (Ray) wrote:
> The gnumeric package currently in testing, 1.8.3-5, is a bit of a mess
> (upstream 1.8.3 plus some updates from svn). It is affected by several
> issues that are fixed in the sid version, 1.8.4-3, in particular #510929
> (crash on old files), #509281 (?xcel charts import/export issue), and
> #513418 (CVE-2009-0318).
> 
> A raw diff between the two versions is large, but this is largely due to
> updated changelogs and generated files (Makefile.in, configure etc.); the
> actual code changes are few but important.
> 
> Please consider allowing 1.8.4-3 into testing.
unblocked

Cheers

Luk