oss-security - Re: CVE-2010 Request -- blender: Insecure temporary file use by creating file string in undo save quit Blender kernel routine (re-occurrence of CVE-2008-1103)

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CAF6rxgmwqc4pFZmN6EV3aSHNqX0QDFcXbn_cGqDdQk_=yf=AFA@mail.gmail.com>
Date: Fri, 7 Sep 2012 13:27:32 -0400
From: Eitan Adler <lists@...anadler.com>
To: Kurt Seifried <kseifried@...hat.com>
Cc: oss-security@...ts.openwall.com, Jan Lieskovsky <jlieskov@...hat.com>, 
	Paul Wise <pabs@...ian.org>, Cyril Brulebois <kibi@...ian.org>
Subject: Re: CVE-2010 Request -- blender: Insecure temporary
 file use by creating file string in undo save quit Blender kernel routine
 (re-occurrence of CVE-2008-1103)

On 7 September 2012 13:25, Kurt Seifried <kseifried@...hat.com> wrote:
>
> *REJECT* CVE-2012-4410 - this has the wrong year. The issue was
> reported in 2010.
>
> Please use CVE-2010-5105 for this issue, it has the correct year.

Thanks.

On 6 September 2012 20:43, Kurt Seifried <kseifried@...hat.com> wrote:
> Because sometimes I make mistakes and don't read so good =) Steven, is
> this worth fixing?

:) You do really good work usually. Thanks for that!

-- 
Eitan Adler

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.