Mandriva Linux Security Advisory 2009-047-1 – Python has a variable called sys.path that contains all paths where Python loads modules by using import scripting procedure. A wrong handling of that variable enables local attackers to execute arbitrary code via Python scripting in the current Vim working directory. This update provides fix for that vulnerability. This update also provides updated packages for Mandriva Linux 2008.0.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/75155/MDVSA-2009-047-1.txt
Source: https://packetstormsecurity.com/files/75155/Mandriva-Linux-Security-Advisory-2009-047.html