Red Hat Security AdvisoryRHSA-2008:0893
bzip2 security update
Released 2008-09-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 bzip2-1.0.2-12.EL3, bzip2-1.0.2-12.EL3.i386, bzip2-devel-1.0.2-12.EL3 +3
- Red Hat Enterprise Linux (v. 5 server) bzip2-1.0.3-4.el5_2, bzip2-1.0.3-4.el5_2.i386, bzip2-1.0.3-4.el5_2.ia64 +9
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 bzip2-1.0.1-5.EL2.1, bzip2-1.0.1-5.EL2.1.i386, bzip2-1.0.1-5.EL2.1.ia64 +4
- Red Hat Enterprise Linux AS version 3 bzip2-1.0.2-12.EL3, bzip2-1.0.2-12.EL3.i386, bzip2-1.0.2-12.EL3.ia64 +9
- Red Hat Enterprise Linux AS version 4 bzip2-1.0.2-14.el4_7, bzip2-1.0.2-14.el4_7.i386, bzip2-1.0.2-14.el4_7.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) bzip2-1.0.3-4.el5_2, bzip2-1.0.3-4.el5_2.i386, bzip2-libs-1.0.3-4.el5_2 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bzip2-1.0.3-4.el5_2, bzip2-devel-1.0.3-4.el5_2, bzip2-devel-1.0.3-4.el5_2.i386
- Red Hat Enterprise Linux Desktop version 4 bzip2-1.0.2-14.el4_7, bzip2-1.0.2-14.el4_7.i386, bzip2-devel-1.0.2-14.el4_7 +3
- Red Hat Enterprise Linux ES version 2.1 bzip2-1.0.1-5.EL2.1, bzip2-1.0.1-5.EL2.1.i386, bzip2-devel-1.0.1-5.EL2.1.i386 +1
- Red Hat Enterprise Linux ES version 3 bzip2-1.0.2-12.EL3, bzip2-1.0.2-12.EL3.i386, bzip2-1.0.2-12.EL3.ia64 +6
- Red Hat Enterprise Linux ES version 4 bzip2-1.0.2-14.el4_7, bzip2-1.0.2-14.el4_7.i386, bzip2-1.0.2-14.el4_7.ia64 +6
- Red Hat Enterprise Linux WS version 2.1 bzip2-1.0.1-5.EL2.1, bzip2-1.0.1-5.EL2.1.i386, bzip2-devel-1.0.1-5.EL2.1.i386 +1
- Red Hat Enterprise Linux WS version 3 bzip2-1.0.2-12.EL3, bzip2-1.0.2-12.EL3.i386, bzip2-1.0.2-12.EL3.ia64 +6
- Red Hat Enterprise Linux WS version 4 bzip2-1.0.2-14.el4_7, bzip2-1.0.2-14.el4_7.i386, bzip2-1.0.2-14.el4_7.ia64 +6
- Red Hat Linux Advanced Workstation 2.1 bzip2-1.0.1-5.EL2.1, bzip2-1.0.1-5.EL2.1.ia64, bzip2-devel-1.0.1-5.EL2.1.ia64 +1
Fixes 1 record
Priority LOW 27
bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Fo…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04519 · Published 2008-03-18 · Fixed CWE-119
