lp:ubuntu/hardy-security/blender

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

25. By Stefan Lesicnik on 2009-01-21

* SECURITY UPDATE: Stack-based buffer overflow in the imb_loadhdr
  function in Blender 2.45 allows user-assisted remote attackers
  to execute arbitrary code via a .blend file that contains a crafted
  Radiance RGBE image (LP: #222592)
  - 20_CVE-2008-1102.diff: Upstream patch to address stack overflow.
  - CVE-2008-1102
* SECURITY UPDATE: Untrusted search path vulnerability in BPY_interface in
  Blender 2.46 allows local users to execute arbitrary code via a Trojan
  horse Python file in the current working directory, related to an
  erroneous setting of sys.path by the PySys_SetArgv function. (LP: #319501)
  - 01_sanitize_sys.path: Debian patch to no longer load modules from
    current dir. Slightly modified from Debian patch as per recommendation
    from debian patch author.
  - CVE-2008-4863

24. By Daniel Hahler on 2008-03-22

* Merge from Debian unstable. Remaining Ubuntu changes:
  - Add 30_gameengine-libgl-location-fix.dpatch: use correct libGL SONAME,
    otherwise blender will not start if e.g. libgl1-mesa-dev is missing
  - debian/control
    + Build-depends: python2.5-dev instead of 2.4
    + DebianMaintainerField
  - debian/patches/50_debian_build_config: use BF_PYTHON_VERSION=2.5
* debian/misc/blender-{fullscreen,windowed}.desktop:
  - Fix desktop files (add GenericName, drop extension for Icon, fix syntax
    for MimeType)
  - Add german translation

23. By Daniel Hahler on 2008-02-16

* Merge from Debian unstable (LP: #191130), remaining changes:
  - Add 30_gameengine-libgl-location-fix.dpatch: use correct libGL SONAME,
    otherwise blender will not start if e.g. libgl1-mesa-dev is missing
  - debian/control
    + Build-depends: python2.5-dev instead of 2.4
    + DebianMaintainerField
* Changed debian/patches/50_debian_build_config to use BF_PYTHON_VERSION=2.5

22. By Cyril Brulebois <email address hidden> on 2008-01-30

* Update the following patch to make YafRay available in the list of
  renderers again (Closes: #462949):
   - 50_debian_build_config.
* Install the bpymodules/ directory in /usr/share/blender/scripts
  instead of under the blender/ subdirectory. This way, no special-case
  is needed when dealing with the creation of the symlinks in the user's
  ~/.blender/scripts directory, and it's not possible for another
  package to ship such a directory either (possibly preventing corner
  cases). As a side note, having this directory right under scripts/ is
  needed because the modules it contains are accessed through a
  hardcoded path (Closes: #463162).
* Modify the wrapper again:
   - Extend the detection of the need for a migration to this revision.
   - Use straightforward syntax for the “dpkg --compare-versions” call,
     thanks Florian Ernst.
   - Ensure the scripts/ directory is present.
   - Adjust the creation of the bpydata symlink.
   - Fix the removal of the locale symlink (which is no longer needed).

21. By Jonathan Riddell on 2007-12-11

No change rebuild for libopenexr transition

20. By Kenneth Drake <email address hidden> on 2007-11-21

* Merge from debian unstable (LP: #164417), remaining changes:
  - Add 30_gameengine-libgl-location-fix.dpatch: use correct libGL SONAME
  - debian/control
    + Set Maintainer to Ubuntu MOTU Developers
    + Set XSBC-Original-Maintainer to Debian Blender Maintainers
    + Build-depends: python2.5-dev instead of 2.4
    + Change XS-Python-Version: to current
  - debian/misc/blender-fullscreen.desktop
    + Add -W switch to executable call (run fullscreen without window borders)
  - debian/misc/user-config.py
    + Change BF_PYTHON_VERSION to '2.5'

19. By William Lima <email address hidden> on 2007-07-04

Switch over to python 2.5 (Closes LP: #116540).

18. By Lukas Fittl on 2007-07-03

* Fix fullscreen desktop file to actually work (Closes LP: #123578)
* Use correct libGL SONAME (Closes LP: #113897)

17. By Cyril Brulebois <email address hidden> on 2007-06-05

* Added debian/patches/20_gcc4.3_support.dpatch to fix FTBFS with GCC 4.3.
  Solves:
   - many missing includes;
   - one missing newline;
   - one redefinition.
  (Closes: #417491)
* Rebuild will turn libav{codec,format}0d Depends: into libav{codec,format}1d,
  thus fixing the impossibility to install blender (Closes: #427567).

16. By Florian Ernst <email address hidden> on 2007-05-17

* New upstream release.
* Drop debian/patches/01_64bits_stupidity, not needed anymore: as of this
  version blender is 64 bits safe again. Adjust README.Debian accordingly.