Accepted blender 2.79.b+dfsg0-1~deb9u2 (source all amd64) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 26 Jun 2022 12:03:02 +0200
Source: blender
Binary: blender blender-data blender-dbg
Architecture: source all amd64
Version: 2.79.b+dfsg0-1~deb9u2
Distribution: stretch-security
Urgency: high
Maintainer: Debian Multimedia Maintainers <pkg-multimedia-maintainers@lists.alioth.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
blender - Very fast and versatile 3D modeller/renderer
blender-data - Very fast and versatile 3D modeller/renderer - data package
blender-dbg - Very fast and versatile 3D modeller/renderer - debug package
Changes:
blender (2.79.b+dfsg0-1~deb9u2) stretch-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* CVE-2022-0546
out-of-bounds heap access due to missing checks in the image loader
could result in denial of service, memory corruption or potentially
code execution
* CVE-2022-0545
integer overflow while processing 2d images might result in a
write-what-where vulnerability or an out-of-bounds read vulnerability
which could leak sensitive information or achieve code execution
* CVE-2022-0544
Crafted DDS image files could create an integer underflow in the
DDS loader which leads to an out-of-bounds read and might leak
sensitive information.
Checksums-Sha1:
df978b70894df9016d124f2b3b8b7f4850c9756d 3096 blender_2.79.b+dfsg0-1~deb9u2.dsc
b38747179d834a4d629becf43dd3fb3ed689a843 34602744 blender_2.79.b+dfsg0.orig.tar.xz
ca4c5b092aa2bf309f49b825712484bbaeb4f5a2 224748 blender_2.79.b+dfsg0-1~deb9u2.debian.tar.xz
6e6ee91aa973f80e95b7b5fe52b6281298b3e6af 12305648 blender-data_2.79.b+dfsg0-1~deb9u2_all.deb
4f0e8dc50913a7a225579fc5f9a3d278ab61cef4 247118992 blender-dbg_2.79.b+dfsg0-1~deb9u2_amd64.deb
9388418b7436f2fde46b741463e871d411f9ab43 18915 blender_2.79.b+dfsg0-1~deb9u2_amd64.buildinfo
ed21e97156da4257f3f519c1a18a99c8649caf44 26731580 blender_2.79.b+dfsg0-1~deb9u2_amd64.deb
Checksums-Sha256:
6c73aa992b2db2f0ee240c8d6dc7f53a3eeae265c3e49d490e47c6e479facb0c 3096 blender_2.79.b+dfsg0-1~deb9u2.dsc
3e35b69b2a71c8333c24fc4a74a96745e25e780cd310b5e4bbc001f856be1dd2 34602744 blender_2.79.b+dfsg0.orig.tar.xz
a215773c02c6b049bb3881abff2fb5b4c66d023379a55497d5d57e2f45ff4c7f 224748 blender_2.79.b+dfsg0-1~deb9u2.debian.tar.xz
c9c6d565ac3077eade814ea6b521b2bd159ca0e60aad8bafd0ad9290b8be3569 12305648 blender-data_2.79.b+dfsg0-1~deb9u2_all.deb
9fad03886940834eefbe058450708343fb6c4a229eb6b83b7c25bee43658c886 247118992 blender-dbg_2.79.b+dfsg0-1~deb9u2_amd64.deb
19fda33d626561d3412f34718c941263cec0f93446be68f0f72881300c467d1c 18915 blender_2.79.b+dfsg0-1~deb9u2_amd64.buildinfo
3956bd0f5e32e8b3a7e655f93b802cbe786c48fc312ffab1ad18cea5843e55e7 26731580 blender_2.79.b+dfsg0-1~deb9u2_amd64.deb
Files:
128d2ffa4bc82e28e7dfc80312076a39 3096 graphics optional blender_2.79.b+dfsg0-1~deb9u2.dsc
7b6499fe1489df9fc46f442d4591b3df 34602744 graphics optional blender_2.79.b+dfsg0.orig.tar.xz
951042d1ff2487b4391c6e764b9dc0de 224748 graphics optional blender_2.79.b+dfsg0-1~deb9u2.debian.tar.xz
315b9f0647ebfbb0a3f2dc48b18ac009 12305648 graphics optional blender-data_2.79.b+dfsg0-1~deb9u2_all.deb
80d7d3e7cac6c11e79d0d9fe81afab42 247118992 debug extra blender-dbg_2.79.b+dfsg0-1~deb9u2_amd64.deb
3c5896729ef74add4a27d6610536749f 18915 graphics optional blender_2.79.b+dfsg0-1~deb9u2_amd64.buildinfo
9f77c8c941770d97e5cc491ab4c85440 26731580 graphics optional blender_2.79.b+dfsg0-1~deb9u2_amd64.deb
-----BEGIN PGP SIGNATURE-----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=lgN+
-----END PGP SIGNATURE-----