[Bug 1610862] New: CVE-2017-12082 blender:
Integer Overflow in the CustomData Mesh loading functionality [epel-7]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610862
Bug ID: 1610862
Summary: CVE-2017-12082 blender: Integer Overflow in the
CustomData Mesh loading functionality [epel-7]
Product: Fedora EPEL
Version: epel7
Component: blender
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: luya_tfz(a)thefinalzone.net
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-7.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610859] New: CVE-2017-2905 blender:
Integer Overflow in the legacy Mesh attribute tface
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610859
Bug ID: 1610859
Summary: CVE-2017-2905 blender: Integer Overflow in the legacy
Mesh attribute tface
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: lpardo(a)redhat.com
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
An exploitable integer overflow exists in the upgrade of the legacy Mesh
attribute 'tface' of the Blender open-source 3d creation suite v2.78c. A
specially crafted .blend file can cause an integer overflow resulting in a
buffer overflow which can allow for code execution under the context of the
application. An attacker can convince a user to open the file or use it as a
library in order to trigger this vulnerability.
References:
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0451
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610860] New: CVE-2017-12099 blender:
Integer Overflow in the legacy Mesh attribute tface [epel-7]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610860
Bug ID: 1610860
Summary: CVE-2017-12099 blender: Integer Overflow in the legacy
Mesh attribute tface [epel-7]
Product: Fedora EPEL
Version: epel7
Component: blender
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: luya_tfz(a)thefinalzone.net
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-7.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610857] New: CVE-2017-2905 blender:
Integer Overflow in the multires_load_old_dm functionality
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610857
Bug ID: 1610857
Summary: CVE-2017-2905 blender: Integer Overflow in the
multires_load_old_dm functionality
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: lpardo(a)redhat.com
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
An exploitable integer overflow exists in the 'multires_load_old_dm'
functionality of the Blender open-source 3d creation suite v2.78c. A specially
crafted .blend file can cause an integer overflow resulting in a buffer
overflow which can allow for code execution under the context of the
application. An attacker can convince a user to open a .blend file in order to
trigger this vulnerability.
References:
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0452
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610858] New: CVE-2017-12100 blender:
Integer Overflow in the multires_load_old_dm functionality [epel-7]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610858
Bug ID: 1610858
Summary: CVE-2017-12100 blender: Integer Overflow in the
multires_load_old_dm functionality [epel-7]
Product: Fedora EPEL
Version: epel7
Component: blender
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: luya_tfz(a)thefinalzone.net
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-7.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610854] New: CVE-2017-2905 blender:
Integer Overflow in the modifier_mdef_compact_influences functionality
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610854
Bug ID: 1610854
Summary: CVE-2017-2905 blender: Integer Overflow in the
modifier_mdef_compact_influences functionality
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: lpardo(a)redhat.com
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
An exploitable integer overflow exists in the
'modifier_mdef_compact_influences' functionality of the Blender open-source 3d
creation suite v2.78c. A specially crafted .blend file can cause an integer
overflow resulting in a buffer overflow which can allow for code execution
under the context of the application. An attacker can convince a user to open a
.blend file in order to trigger this vulnerability.
References:
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0453
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610856] New: CVE-2017-12101 blender:
Integer Overflow in the modifier_mdef_compact_influences functionality [
epel-7]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610856
Bug ID: 1610856
Summary: CVE-2017-12101 blender: Integer Overflow in the
modifier_mdef_compact_influences functionality
[epel-7]
Product: Fedora EPEL
Version: epel7
Component: blender
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: luya_tfz(a)thefinalzone.net
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-7.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610850] New: CVE-2017-12103 blender:
Integer Overflow when it converts converts curves to polygons
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610850
Bug ID: 1610850
Summary: CVE-2017-12103 blender: Integer Overflow when it
converts converts curves to polygons
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: lpardo(a)redhat.com
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
An exploitable integer overflow exists in the way that the Blender open-source
3d creation suite v2.78c converts curves to polygons. A specially crafted
.blend file can cause an integer overflow resulting in a buffer overflow which
can allow for code execution under the context of the application. An attacker
can convince a user to open the file or use the file as a library in order to
trigger this vulnerability.
References:
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0454
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610851] New: CVE-2017-12102 blender:
Integer Overflow when it converts converts curves to polygons [epel-7]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610851
Bug ID: 1610851
Summary: CVE-2017-12102 blender: Integer Overflow when it
converts converts curves to polygons [epel-7]
Product: Fedora EPEL
Version: epel7
Component: blender
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: luya_tfz(a)thefinalzone.net
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-7.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610848] New: CVE-2017-12103 blender:
Integer Overflow when it converts text rendered as a font into a curve [
epel-7]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610848
Bug ID: 1610848
Summary: CVE-2017-12103 blender: Integer Overflow when it
converts text rendered as a font into a curve [epel-7]
Product: Fedora EPEL
Version: epel7
Component: blender
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: luya_tfz(a)thefinalzone.net
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-7.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months