Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.maint.python > #14953
| From | "Rebecca N. Palmer" <rebecca_palmer@zoho.com> |
|---|---|
| Newsgroups | linux.debian.bugs.dist, linux.debian.devel, linux.debian.maint.python |
| Subject | Bug#1031701: python3-pandas: Pandas requires version '2.0.1' or newer of 'xlrd' |
| Date | 2023-02-27 09:00 +0100 |
| Message-ID | <G3GAp-8O0x-7@gated-at.bofh.it> (permalink) |
| References | (2 earlier) <G1lA5-7k7W-7@gated-at.bofh.it> <G1mmt-7koa-5@gated-at.bofh.it> <G1w2u-7qEx-3@gated-at.bofh.it> <G1lA5-7k7W-7@gated-at.bofh.it> <G1w2u-7qEx-3@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Cross-posted to 3 groups.
I don't consider the lack of .xls in pandas worth a freeze exception, but consider it reasonable for others to disagree with that. As noted in the bug, there are some (possibly not-technically-valid) .xlsx files that xlrd 1 can open but openpyxl can't - _pandas_ won't be able to open those either way, but allowing other applications to do so is still worth something. There also may be applications that could switch to openpyxl but simply haven't. I don't know how much effort switching is / whether it would be reasonably possible for us to do it. However, I wasn't aware of the security issues in xlrd 1 when I wrote that, and they may well be a reason to go to xlrd 2 and accept this breakage. Are they the long-standing "denial of service via excessive XML entity expansion" or is there now (also) a risk of something worse?
Back to linux.debian.maint.python | Previous | Next | Find similar | Unroll thread
Bug#1031701: python3-pandas: Pandas requires version '2.0.1' or newer of 'xlrd' "Rebecca N. Palmer" <rebecca_palmer@zoho.com> - 2023-02-27 09:00 +0100
csiph-web