Mageia alert MGASA-2012-0319 (blender)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2012-0319: blender-2.49b-11.4.mga1
 (1/core) 
Date:
    	     
 
Tue, 30 Oct 2012 23:56:13 +0100
Message-ID:
    	     
 
<20121030225613.GA9485@valstar.mageia.org>

MGASA-2012-0319
Date: 	October 30th, 2012
Affected releases: 	1


Description:
Updated blender package fixes security vulnerability:

Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute
arbitrary code via a .blend file that contains Python statements in the
onLoad action of a ScriptLink SDNA (CVE-2009-3850).


Updated Packages:
blender-2.49b-11.4.mga1


References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3850
http://lists.fedoraproject.org/pipermail/package-announce...
https://bugs.mageia.org/show_bug.cgi?id=7065
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-...