CVE and update status of the FreeBSD ports tree3,755 unaddressed CVEs in 720 portsAll times are CET
Port details

graphics/blender4 4.5.14_2

3D modeling/rendering/animation package -v4.x

Port info

Maintainer
FreeBSD@Shaneware.biz
Packages
latest: 4.5.14, update to 4.5.14_2 not built yet
Upstream
up to date
Last update
to 4.5.14_2 · 3578a1e969
Quarterly
not in the 2026Q4 packages
WWW
https://www.blender.org/
CPE
Blender
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install blender4
installs 4.5.14 from latest
Port
# cd /usr/ports/graphics/blender4 && make install clean
# make -C /usr/ports/graphics/blender4 config  # change options first
Size
68 MiB download · 220 MiB installed
License
GPLv3+
Options
47 of 57 on in the package: ALEMBIC AVI BULLET CAMERATRACK CINEON COLLADA COMPOSITOR CYCLES CYCLES_EMBR CYCLES_ONEAPI DRACO EBOOL FFMPEG FFTW3 FREESTYLE FRIBIDI HARFBUZZ HARU INPUT_NDOF LZMA LZO MANIFOLD MENU MOD_FLUID MOD_OCEANSIM MOD_REMESH NLS OPENAL OPENCOLORIO OPENEXR OPENIMAGEDN OPENJPEG OPENPGL OPENSUBDIV OPENVDB POTRACE PUGIXML PULSEAUDIO QUADRIFLOW SDL TBB THUMBNAILER TRACE WAYLAND WEBP XF86VMODE XINPUT
Show the 10 options that are off
CYCLES_OSL HEADLESS JACK OPENMP OPENXR PIPEWIRE SIMD SNDFILE USD VULKAN

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 164.5.14✗–
FreeBSD 154.5.14✗–
FreeBSD 14✗✗✗

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 15✗✗–
FreeBSD 14✗✗✗

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Dependencies

Depends on 59

Run and library dependencies of the package on latest. Build dependencies are not in the package index.

Required by 0

No package on latest depends on it.

Packages on latest that depend on it directly.

Unaddressed (1)

The VuXML generator has a ready entry for each CVE below. Tick the ones that belong together and generate one entry for them. What does this mean?

The CVE record lists the packaged version 4.5.14 as affected, and no VuXML entry names the CVE. What does this mean?

SelectCVECVSSPublishedDescription
CVE-2026-601036.82026-07-13Blender 3.0.0 through 5.1.2 contains an out-of-bounds read vulnerability that allows attackers to trigger a crash or read adjacent heap memory by supplying a crafted .bl…
tick the CVEs you want in it

VuXML only (0)

Listed in VuXML, the packaged version 4.5.14 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (18)

Yuri Victorovich (yuri) · 4.5.14_2
misc/openvdb: update 13.1.0 → 14.0.0

ChangeLog: https://github.com/AcademySoftwareFoundation/openvdb/releases/tag/v14.0.0
3578a1e969
Jochen Neumeister (joneum) · 4.5.14_1
*/*: Bump consumers of opencolorio, openimageio and osl

The shared libraries carry their version in the file name.

Sponsored by:	Netzkommune GmbH
02a457a6ff
Jochen Neumeister (joneum) · 4.5.14 MFH 2026Q4 ✓
graphics/blender4: Update to 4.5.14

Bugfix releases of the 4.5 LTS series. They fix crashes in the Video
Sequencer and in Armature Edit mode and the Extensions tab not loading
because of an SSL problem.

Changelog: https://www.blender.org/download/lts/4-5/

PR:		298728
Sponsored by:	Netzkommune GmbH
76eb4a792b
Jochen Neumeister (joneum) · 4.5.5_7 MFH 2026Q4 ✓
graphics/blender4: Unbreak with non-3.11 Python and FFmpeg 9

Blender's CMake defaults to Python 3.11 and fails when that exact
version is missing. Pass the version of the default Python instead,
look up the NumPy 2 headers under numpy/_core/include and backport
FFmpeg 9 support for audaspace from upstream (e3c92c22817d).

PR:		299533
Approved by:	Shane <FreeBSD@ShaneWare.Biz> (maintainer)
Sponsored by:	Netzkommune GmbH
0146d7f562
Dima Panov (fluffy) · 4.5.5_6
*/*: update boost consumers after boost-1.92
97a84ef467
Yuri Victorovich (yuri) · 4.5.5_5
misc/{,py-}openvdb: update 13.0.0 → 13.1.0
be3dc80890
Daniel Engberg (diizzy) · 4.5.5_4
graphics/blender4: Mark BROKEN

Fails to find Python 3.11 while port depends on default version which is 3.12

Reported by:	pkg-fallout
0ce7f93442
Bernhard Froehlich (decke) · 4.5.5_4
graphics/blender4: Fix CPE information
a04c5bde53
Antoine Brodin (antoine) · 4.5.5_4
graphics/blender*: unbreak the ports tree with python different from 3.11
feacbf45b8
Max Brazhnikov (makc) · 4.5.5_4
*/*: bump PORTREVISION after switching to NumPy 2.x
2bf3834a19
Max Brazhnikov (makc) · 4.5.5_3
*/*: Switch to NumPy 2.x

PR:		294328
Exp-run:	antoine
b0b4d9e1ea
Yuri Victorovich (yuri) · 4.5.5_3
graphics/openusd: update 25.11 → 26.05
5246ef150c
Charlie Li (vishwin) · 4.5.5_2
python.mk: retire ${PYNUMPY}

With both math/py-numpy (2) and math/py-numpy1, the variable stopped
making sense. Also remove the upper version bound.
d04d23ae37
Charlie Li (vishwin) · 4.5.5_2
math/py-numpy: switch all consumers to math/py-numpy1

...and bump PORTREVISIONs of consumers with hard RUN_DEPENDS

PR: 281470
d4bd5ba72e
Dima Panov (fluffy) · 4.5.5_1
graphics/blender4: add missing #include <cassert>

Reported by:	bulk -t
Approved by:	portmgr blanket
aa02d6d2ad
Vladimir Druzenko (vvd) · 4.5.5_1
graphics/blender4: Fix desktop file - refers to stale executable name

The desktop file Exec command line refers to the wrong executable name
"blender" and it should be "blender-45".

PR:		293215
Approved by:	portmgr (blanket - fix runtime)
bbc0e2dcc9
Vladimir Druzenko (vvd) · 4.5.5
misc/usd: Move to graphics/openusd

Rename to match upstream naming and moved to a more appropriate category

PR:		292497
Approved by:	yuri (maintainer, timeout 1 month)
47a07f93d2
Robert Clausecker (fuz) · 4.5.5
graphics/blender: update to 5.0.1

- a new port graphics/blender4 provides v4.5.x for compatibility

Changelog: https://developer.blender.org/docs/release_notes/5.0/
Changelog: https://developer.blender.org/docs/release_notes/5.0/corrective_releases/
Changelog: https://www.blender.org/download/lts/4-5/#versions

PR:		282988
Reported by:	kunda <luzpaz@pm.me>
82160875da