CVS commit: pkgsrc/graphics/blender

[Tonnerre Lombard <tonnerre%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tonnerre
Date:           Sat May 17 10:33:15 UTC 2008

Modified Files:
        pkgsrc/graphics/blender: Makefile distinfo
Added Files:
        pkgsrc/graphics/blender/patches: patch-ae patch-af patch-ag

Log Message:
Fix CVEs CVE-2008-1102 and CVE-2008-1102 for blender:
 - Fix arbitrary code execution vulnerability in .bend files which contain
   a crafted RGBE file (CVE-2008-1102).
 - Create various temporary files in safer paths (CVE-2008-1103).


To generate a diff of this commit:
cvs rdiff -r1.60 -r1.61 pkgsrc/graphics/blender/Makefile
cvs rdiff -r1.23 -r1.24 pkgsrc/graphics/blender/distinfo
cvs rdiff -r0 -r1.7 pkgsrc/graphics/blender/patches/patch-ae
cvs rdiff -r0 -r1.6 pkgsrc/graphics/blender/patches/patch-af \
    pkgsrc/graphics/blender/patches/patch-ag

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.