[CVE-2008-1103] Multiple temporary files vulnerabilities

[Till Ulen]

Binary package hint: blender

CVE-2008-1103 description:

'Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues." '

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1103
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html

I have no idea whether this is the same problem as that described in bug #6671. If you know that it is, please mark this bug as a duplicate of bug 6671. Until then this bug can serve as a reminder that CVE-2008-1103 might be a separate set of problems that need fixing.

[Till Ulen (tillulen)]

Fixed by Gentoo in GLSA 200805-12 <http://www.gentoo.org/security/en/glsa/glsa-200805-12.xml>.

[Daniel Hahler (blueyed)]

Thanks for filing this bug. It sounds like bug 6671.
Can you link to any patches?

[Daniel Hahler (blueyed)]

Sounds a bit like http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=298167, which appears to have been fixed in Debian in 2.45-2, so for Ubuntu since Hardy - while bug 6671 states it for Hardy.

Let's use this bug to track the CVE state, which is really vague - and/or I've not looked too much around for a patch. At least the 2.46 upstream changelog (html page) does not contain the word "security".

[Hew (hew)]

Ubuntu Feisty Fawn is no longer supported, so a SRU will not be issued for this release. Marking Feisty as Won't Fix.

[Marc Deslauriers (mdeslaur)]

This was actually fixed by Debian in 2.40-1, so none of our releases are affected.