gnumeric r17128 - branches/gnumeric-1-8/debian

[jdassen svn gnome org]

Author: jdassen
Date: Sun Feb  8 13:15:55 2009
New Revision: 17128
URL: http://svn.gnome.org/viewvc/gnumeric?rev=17128&view=rev

Log:
Updated debianisation

Modified:
   branches/gnumeric-1-8/debian/changelog

Modified: branches/gnumeric-1-8/debian/changelog
==============================================================================
--- branches/gnumeric-1-8/debian/changelog	(original)
+++ branches/gnumeric-1-8/debian/changelog	Sun Feb  8 13:15:55 2009
@@ -42,6 +42,15 @@
 
  -- J.H.M. Dassen (Ray) <jdassen debian org>  Sun, 11 Jan 2009 16:19:33 +0100
 
+gnumeric (1.8.3-5+lenny1) testing-security; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * Fix insecure search path vulnerability due to how python handles sys.path
+    by sanitizing sys.path after calling PySys_SetArgv
+    (CVE-2009-0318; Closes: #513418).
+
+ -- Nico Golde <nion debian org>  Fri, 06 Feb 2009 19:24:06 +0100
+
 gnumeric (1.8.3-5) unstable; urgency=medium
 
   * [plugins/perl-loader/perl-loader.c] Call PERL_SYS_INIT3() prior to