[Git][security-tracker-team/security-tracker][master] new blender issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d8863084 by Moritz Muehlenhoff at 2026-10-30T20:57:27+01:00
new blender issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -239,15 +239,32 @@ CVE-2026-119728 (A flaw was found in the H.264 video parser in gst-plugins-bad.
 CVE-2026-119727 (A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. Wh ...)
 	TODO: check
 CVE-2026-119722 (Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-boun ...)
-	TODO: check
+	- blender <unfixed>
+	NOTE: https://projects.blender.org/blender/blender/pulls/164279
+	NOTE: https://projects.blender.org/blender/blender/commit/c5d6faf04bf3f17efb6c404896ef0e7427784da5 (v5.2.3)
+	NOTE: https://projects.blender.org/blender/blender/commit/7de4986e74ed47f67e78eb4b76609bb6d1ae8a0e (v4.5.15)
 CVE-2026-119721 (Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds r ...)
-	TODO: check
+	- blender <unfixed>
+	NOTE: https://projects.blender.org/blender/blender/pulls/164279
+	NOTE: https://projects.blender.org/blender/blender/commit/c5d6faf04bf3f17efb6c404896ef0e7427784da5 (v5.2.3)
+	NOTE: https://projects.blender.org/blender/blender/commit/495deb9efff880c42aa88110aec0ea2c0fb1eb07 (v5.2.3)
+	NOTE: https://projects.blender.org/blender/blender/commit/7de4986e74ed47f67e78eb4b76609bb6d1ae8a0e (v4.5.15)
+	NOTE: https://projects.blender.org/blender/blender/commit/94d99b362b0d236dcf07a96c1c8f9f5389d0583c (v4.5.15)
 CVE-2026-119720 (Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-boun ...)
-	TODO: check
+	- blender <unfixed>
+	NOTE: https://projects.blender.org/blender/blender/pulls/164279
+	NOTE: https://projects.blender.org/blender/blender/commit/c5d6faf04bf3f17efb6c404896ef0e7427784da5 (v5.2.3)
+	NOTE: https://projects.blender.org/blender/blender/commit/7de4986e74ed47f67e78eb4b76609bb6d1ae8a0e (v4.5.15)
 CVE-2026-119719 (Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer over ...)
-	TODO: check
+	- blender <unfixed>
+	NOTE: https://projects.blender.org/blender/blender/pulls/164279
+	NOTE: https://projects.blender.org/blender/blender/commit/d723c68112d216099c9b24dab5c8440bab7add08 (v5.2.3)
+	NOTE: https://projects.blender.org/blender/blender/commit/71c10a0217d5e331b215b76773ad23b64974bd97 (v4.5.15)
 CVE-2026-119718 (Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer over ...)
-	TODO: check
+	- blender <unfixed>
+	NOTE: https://projects.blender.org/blender/blender/pulls/164279
+	NOTE: https://projects.blender.org/blender/blender/commit/a0c62db3db61803f86e874bc05407890ce4a1e43 (v5.2.3)
+	NOTE: https://projects.blender.org/blender/blender/commit/4f8a3270213b1ee67b44fe122ace3debdec3de47 (v4.5.15)
 CVE-2026-119717 (pybars4 through 0.9.13 contains a code injection vulnerability in pyba ...)
 	TODO: check
 CVE-2026-119716 (pybars3 through 0.9.7 contains a code injection vulnerability in pybar ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d88630845219438c4ecc069ec964e3b641a0795e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d88630845219438c4ecc069ec964e3b641a0795e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/22eb00da/attachment.htm>