oss-sec mailing list archives

Re: CVE-2010 Request -- blender: Insecure temporary file use by creating file string in undo save quit Blender kernel routine (re-occurrence of CVE-2008-1103)

From: Kurt Seifried <kseifried () redhat com>
Date: Fri, 07 Sep 2012 11:25:05 -0600

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/06/2012 04:46 PM, Eitan Adler wrote:

On 6 September 2012 13:56, Kurt Seifried <kseifried () redhat com>
wrote:

Upstream ticket: [1] 
https://projects.blender.org/tracker/index.php?func=detail&aid=22509&group_id=9&atid=498

 Could you allocate a CVE-2010- identifier for this?


Please use CVE-2012-4410 for this issue.


Why the 2012 CVE when the issue was reported in 2010?


*REJECT* CVE-2012-4410 - this has the wrong year. The issue was
reported in 2010.

Please use CVE-2010-5105 for this issue, it has the correct year.


- -- 
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/
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=Y0oG
-----END PGP SIGNATURE-----

Current thread:

CVE-2010 Request -- blender: Insecure temporary file use by creating file string in undo save quit Blender kernel routine (re-occurrence of CVE-2008-1103) Jan Lieskovsky (Sep 06)
- Re: CVE-2010 Request -- blender: Insecure temporary file use by creating file string in undo save quit Blender kernel routine (re-occurrence of CVE-2008-1103) Kurt Seifried (Sep 06)
  - Re: CVE-2010 Request -- blender: Insecure temporary file use by creating file string in undo save quit Blender kernel routine (re-occurrence of CVE-2008-1103) Eitan Adler (Sep 06)
    - Re: CVE-2010 Request -- blender: Insecure temporary file use by creating file string in undo save quit Blender kernel routine (re-occurrence of CVE-2008-1103) Kurt Seifried (Sep 06)
    - Re: CVE-2010 Request -- blender: Insecure temporary file use by creating file string in undo save quit Blender kernel routine (re-occurrence of CVE-2008-1103) Kurt Seifried (Sep 07)
    - Re: CVE-2010 Request -- blender: Insecure temporary file use by creating file string in undo save quit Blender kernel routine (re-occurrence of CVE-2008-1103) Eitan Adler (Sep 07)