Mandriva Linux Security Advisory 2009-048-1 – Python has a variable called sys.path that contains all paths where Python loads modules by using import scripting procedure. A wrong handling of that variable enables local attackers to execute arbitrary code via Python scripting in the current Epiphany working directory. This update provides fix for that vulnerability. The previous update package was not built against the correct (latest) libxulrunner-1.9.0.6 library (fixes #48163)
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/75156/MDVSA-2009-048-1.txt
Source: https://packetstormsecurity.com/files/75156/Mandriva-Linux-Security-Advisory-2009-048.html