[Bug 1610847] New: CVE-2017-12103 blender:
Integer Overflow when it converts text rendered as a font into a curve
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610847
Bug ID: 1610847
Summary: CVE-2017-12103 blender: Integer Overflow when it
converts text rendered as a font into a curve
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: lpardo(a)redhat.com
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
An exploitable integer overflow exists in the way that the Blender open-source
3d creation suite v2.78c converts text rendered as a font into a curve. A
specially crafted .blend file can cause an integer overflow resulting in a
buffer overflow which can allow for code execution under the context of the
application. An attacker can convince a user to open the file or use the file
as a library in order to trigger this vulnerability.
References:
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0455
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610846] New: CVE-2017-12104 blender:
Integer Overflow when it draws a Particle object [epel-7]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610846
Bug ID: 1610846
Summary: CVE-2017-12104 blender: Integer Overflow when it draws
a Particle object [epel-7]
Product: Fedora EPEL
Version: epel7
Component: blender
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: luya_tfz(a)thefinalzone.net
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-7.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610845] New: CVE-2017-2905 blender:
Integer Overflow when it draws a Particle object
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610845
Bug ID: 1610845
Summary: CVE-2017-2905 blender: Integer Overflow when it draws
a Particle object
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: lpardo(a)redhat.com
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
An exploitable integer overflow exists in the way that the Blender open-source
3d creation suite v2.78c draws a Particle object. A specially crafted .blend
file can cause an integer overflow resulting in a buffer overflow which can
allow for code execution under the context of the application. An attacker can
convince a user to open the file or use the file as a library in order to
trigger this vulnerability.
References:
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0425
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610842] New: CVE-2017-2905 blender:
Integer Overflow in the Image loading functionality
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610842
Bug ID: 1610842
Summary: CVE-2017-2905 blender: Integer Overflow in the Image
loading functionality
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: lpardo(a)redhat.com
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
An exploitable integer overflow exists in the Image loading functionality of
the Blender open-source 3d creation suite v2.78c. A specially crafted .blend
file can cause an integer overflow resulting in a buffer overflow which can
allow for code execution under the context of the application. An attacker can
convince a user to open the file or use it as a library in order to trigger
this vulnerability.
References:
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0425
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610843] New: CVE-2017-2918 blender:
Integer Overflow in the Image loading functionality [epel-7]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610843
Bug ID: 1610843
Summary: CVE-2017-2918 blender: Integer Overflow in the Image
loading functionality [epel-7]
Product: Fedora EPEL
Version: epel7
Component: blender
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: luya_tfz(a)thefinalzone.net
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-7.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610839] New: CVE-2017-2905 blender:
Integer Overflow in the BKE_mesh_vertexCos_get function
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610839
Bug ID: 1610839
Summary: CVE-2017-2905 blender: Integer Overflow in the
BKE_mesh_vertexCos_get function
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: lpardo(a)redhat.com
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
An exploitable integer overflow exists in the way that the Blender open-source
3d creation suite v2.78c applies a particular object modifier to a Mesh. A
specially crafted .blend file can cause an integer overflow resulting in a
buffer overflow which can allow for code execution under the context of the
application. An attacker can convince a user to open the file or use the file
as a library in order to trigger this vulnerability.
References:
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0457
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610840] New: CVE-2017-12105 blender:
Integer Overflow in the BKE_mesh_vertexCos_get function [epel-7]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610840
Bug ID: 1610840
Summary: CVE-2017-12105 blender: Integer Overflow in the
BKE_mesh_vertexCos_get function [epel-7]
Product: Fedora EPEL
Version: epel7
Component: blender
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: luya_tfz(a)thefinalzone.net
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-7.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610836] New: CVE-2017-2908 blender:
Integer Overflow in the thumbnail functionality [epel-7]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610836
Bug ID: 1610836
Summary: CVE-2017-2908 blender: Integer Overflow in the
thumbnail functionality [epel-7]
Product: Fedora EPEL
Version: epel7
Component: blender
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: luya_tfz(a)thefinalzone.net
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-7.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610835] New: CVE-2017-2905 blender:
Integer Overflow in the thumbnail functionality
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610835
Bug ID: 1610835
Summary: CVE-2017-2905 blender: Integer Overflow in the
thumbnail functionality
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: lpardo(a)redhat.com
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
An exploitable integer overflow exists in the thumbnail functionality of the
Blender open-source 3d creation suite version 2.78c. A specially crafted .blend
file can cause an integer overflow resulting in a buffer overflow which can
allow for code execution under the context of the application. An attacker can
convince a user to render the thumbnail for the file while in the File->Open
dialog.
References:
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0415
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months
[Bug 1610834] New: CVE-2017-2907 blender:
Integer Overflow in the animation playing functionality [epel-7]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1610834
Bug ID: 1610834
Summary: CVE-2017-2907 blender: Integer Overflow in the
animation playing functionality [epel-7]
Product: Fedora EPEL
Version: epel7
Component: blender
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: luya_tfz(a)thefinalzone.net
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: design-devel(a)lists.fedoraproject.org,
hobbes1069(a)gmail.com, kwizart(a)gmail.com,
luya_tfz(a)thefinalzone.net, negativo17(a)gmail.com,
promac(a)gmail.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-7.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 11 months