diff --git a/blender-2.46rc3-cve-2008-1103-1.patch b/blender-2.46rc3-cve-2008-1103-1.patch new file mode 100644 index 0000000..c45a811 --- /dev/null +++ b/blender-2.46rc3-cve-2008-1103-1.patch @@ -0,0 +1,12 @@ +diff -up blender/source/blender/blenkernel/intern/blender.c.cve blender/source/blender/blenkernel/intern/blender.c +--- blender/source/blender/blenkernel/intern/blender.c.cve 2008-05-07 17:37:52.000000000 +0200 ++++ blender/source/blender/blenkernel/intern/blender.c 2008-05-07 17:38:22.000000000 +0200 +@@ -716,7 +716,7 @@ void BKE_undo_save_quit(void) + + BLI_make_file_string("/", str, btempdir, "quit.blend"); + +- file = open(str,O_BINARY+O_WRONLY+O_CREAT+O_TRUNC, 0666); ++ file = open(str,O_BINARY+O_WRONLY+O_CREAT+O_TRUNC+O_EXCL, 0666); + if(file == -1) { + error("Unable to save %s, check you have permissions", str); + return; diff --git a/blender.spec b/blender.spec index 01c7da8..505028a 100644 --- a/blender.spec +++ b/blender.spec @@ -3,7 +3,7 @@ Name: blender Version: 2.46 -Release: 0.3%{?dist} +Release: 0.3.1%{?dist} Summary: 3D modeling, animation, rendering and post-production @@ -27,6 +27,8 @@ Source7: blender-2.44.config Patch1: blender-2.44-scons.patch Patch2: blender-2.44-bid.patch +Patch100: blender-2.46rc3-cve-2008-1103-1.patch + BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildRequires: desktop-file-utils @@ -72,6 +74,7 @@ available. %patch1 -p1 -b .org %patch2 -p1 -b .bid +%patch100 -p1 -b .cve PYVER=$(%{__python} -c "import sys ; print sys.version[:3]") @@ -174,6 +177,9 @@ update-desktop-database %{_datadir}/applications > /dev/null 2>&1 || : %{_datadir}/mime/packages/blender.xml %changelog +* Wed May 7 2008 Jochen Schmitt 2.46-0.3.1 +- Some fixes for CVE-2008-1003 + * Tue May 6 2008 Jochen Schmitt 2.46-0.3 - Release Canditate for 2.46