[Bug 2118556] New: CVE-2022-2832 blender: Null pointer reference in blender thumbnail extractor

https://bugzilla.redhat.com/show_bug.cgi?id=2118556

            Bug ID: 2118556
           Summary: CVE-2022-2832 blender: Null pointer reference in
                    blender thumbnail extractor
           Product: Security Response
          Hardware: All
                OS: Linux
            Status: NEW
         Component: vulnerability
          Keywords: Security
          Severity: medium
          Priority: medium
          Assignee: security-response-team(a)redhat.com
          Reporter: saroy(a)redhat.com
                CC: code(a)musicinmybrain.net,
                    design-devel(a)lists.fedoraproject.org,
                    kwizart(a)gmail.com, luya_tfz(a)thefinalzone.net,
                    negativo17(a)gmail.com, promac(a)gmail.com
  Target Milestone: ---
    Classification: Other



source/blender/gpu/opengl/gl_backend.cc
Null pointer reference
https://developer.blender.org/T99706
https://developer.blender.org/D15463
https://developer.blender.org/rB00dc7477022acdd969e4d709a235c0be819efa6c


-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2118556

[Bug 2118556] CVE-2022-2832 blender: Null pointer reference in blender thumbnail extractor

https://bugzilla.redhat.com/show_bug.cgi?id=2118556

Sandipan Roy <saroy(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Depends On|                            |2118557, 2118558





Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=2118557
[Bug 2118557] CVE-2022-2832 blender: Null pointer reference in blender
thumbnail extractor [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2118558
[Bug 2118558] CVE-2022-2832 blender: Null pointer reference in blender
thumbnail extractor [epel-7]
-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2118556

[Bug 2118556] CVE-2022-2832 blender: Null pointer reference in blender thumbnail extractor

https://bugzilla.redhat.com/show_bug.cgi?id=2118556



--- Comment #1 from Sandipan Roy <saroy(a)redhat.com&gt; ---
Created blender tracking bugs for this issue:

Affects: epel-7 [bug 2118558]
Affects: fedora-all [bug 2118557]


-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2118556

[Bug 2118556] CVE-2022-2832 blender: Null pointer reference in blender thumbnail extractor

https://bugzilla.redhat.com/show_bug.cgi?id=2118556

Sandipan Roy <saroy(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Blocks|                            |2117709




-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2118556

[Bug 2118556] CVE-2022-2832 blender: Null pointer reference in blender thumbnail extractor

https://bugzilla.redhat.com/show_bug.cgi?id=2118556



--- Comment #2 from Product Security DevOps Team <prodsec-dev(a)redhat.com&gt; ---
This CVE Bugzilla entry is for community support informational purposes only as
it does not affect a package in a commercially supported Red Hat product. Refer
to the dependent bugs for status of those individual community products.


-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2118556

[Bug 2118556] CVE-2022-2832 blender: Null pointer reference in blender thumbnail extractor

https://bugzilla.redhat.com/show_bug.cgi?id=2118556

Product Security DevOps Team <prodsec-dev(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |UPSTREAM
             Status|NEW                         |CLOSED
        Last Closed|                            |2022-09-01 15:55:48




-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2118556

[Bug 2118556] CVE-2022-2832 blender: Null pointer reference in blender thumbnail extractor

https://bugzilla.redhat.com/show_bug.cgi?id=2118556



--- Comment #3 from errata-xmlrpc <errata-xmlrpc(a)redhat.com&gt; ---
This issue has been addressed in the following products:

  OSE-OSC-1.3-RHEL-8

Via RHSA-2022:7058 https://access.redhat.com/errata/RHSA-2022:7058


-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2118556

[Bug 2118556] CVE-2022-2832 blender: Null pointer reference in blender thumbnail extractor

https://bugzilla.redhat.com/show_bug.cgi?id=2118556

errata-xmlrpc <errata-xmlrpc(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Link ID|                            |Red Hat Product Errata
                   |                            |RHSA-2022:7058




-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2118556

[Bug 2118556] CVE-2022-2832 blender: Null pointer reference in blender thumbnail extractor

https://bugzilla.redhat.com/show_bug.cgi?id=2118556
Bug 2118556 depends on bug 2118557, which changed state.

Bug 2118557 Summary: CVE-2022-2832 blender: Null pointer reference in blender thumbnail
extractor [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2118557

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |CLOSED
         Resolution|---                         |EOL




-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2118556