DSA-5176: -1 blender -- security update

Published Jul 4, 2022

Updated

blender - security update

Other sources

Multiple vulnerabilities have been discovered in various image parsers in Blender, a 3D modeller/ renderer, which may result in denial of service or the execution of arbitrary code if a malformed file is opened.

Affected Software

2 affected components

debian/blender

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade blender to a version that resolves this vulnerability.
Patch DSA-5176-1

Event History

Jul 4, 2022

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Who is exposed to these vulnerabilities?

Users of Blender are exposed when they open malformed image files. The affected components are various image parsers within Blender.

What does an attacker need to do to exploit the issue?

An attacker would need to provide a malformed file and have a user open it in Blender. Successful exploitation may cause a denial of service or allow execution of arbitrary code.