[Bf-committers] [Patch]Solving security issues CVE-2008-1103 (partialy) and CVE-2008-4083

[Jochen Schmitt]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

regarding to the following bug reports

https://bugzilla.redhat.com/show_bug.cgi?id=531650
https://bugzilla.redhat.com/show_bug.cgi?id=444535

I have created a patch, which I have attachted to this mail.

The most user visible effect of this patch ist the changing of the
location
where the quid.blend file be be stored.

In the past this file was stored in the /tmp directory which is a bad
choice for a mulituser OS. Now this file will be stored at ^/.blender,
so that each user has it own version of this file.

Best Regards:

Jochen Schmitt

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iJwEAQECAAYFAktXI7AACgkQZLAIBz9lVu+ncQP/dgq5VySsgvYeHVEtIhlHESFW
aBq6zdeL1yvKf8YNDlvmQOv6Yl48yVQ/2vsUnhD4RFOMAYDGNyPQ+PZKNcfS2LGz
+DHNgBLhkBHKkdGs9TOAU61Og29ZcL7Uxos3TvIK9Ihs+gL0Qaki3gpniKYpeJ8a
YybyX0tKV0kl3t3vxPM=
=raMS
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: blender-2.49b-cve.patch
Type: text/x-patch
Size: 2134 bytes
Desc: not available
Url : http://lists.blender.org/pipermail/bf-committers/attachments/20100120/6429dd99/attachment.bin