Security Information / 2018 / Security Information -- DSA-4248-1 blender

Debian Security Advisory

DSA-4248-1 blender -- security update

Date Reported:

17 Jul 2018

Affected Packages:

blender

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2017-2899, CVE-2017-2900, CVE-2017-2901, CVE-2017-2902, CVE-2017-2903, CVE-2017-2904, CVE-2017-2905, CVE-2017-2906, CVE-2017-2907, CVE-2017-2908, CVE-2017-2918, CVE-2017-12081, CVE-2017-12082, CVE-2017-12086, CVE-2017-12099, CVE-2017-12100, CVE-2017-12101, CVE-2017-12102, CVE-2017-12103, CVE-2017-12104, CVE-2017-12105.

More information:

Multiple vulnerabilities have been discovered in various parsers of Blender, a 3D modeller/ renderer. Malformed .blend model files and malformed multimedia files (AVI, BMP, HDR, CIN, IRIS, PNG, TIFF) may result in the execution of arbitrary code.

For the stable distribution (stretch), these problems have been fixed in version 2.79.b+dfsg0-1~deb9u1.

We recommend that you upgrade your blender packages.

For the detailed security status of blender please refer to its security tracker page at: https://security-tracker.debian.org/tracker/blender