Red Hat Security AdvisoryRHSA-2010:0703
bzip2 security update
Released 2010-09-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 bzip2-1.0.2-14.EL3, bzip2-1.0.2-14.EL3.i386, bzip2-devel-1.0.2-14.EL3 +3
- Red Hat Enterprise Linux (v. 5 server) bzip2-1.0.3-6.el5_5, bzip2-1.0.3-6.el5_5.i386, bzip2-1.0.3-6.el5_5.ia64 +9
- Red Hat Enterprise Linux AS version 3 bzip2-1.0.2-14.EL3, bzip2-1.0.2-14.EL3.i386, bzip2-1.0.2-14.EL3.ia64 +9
- Red Hat Enterprise Linux AS version 4 bzip2-1.0.2-16.el4_8, bzip2-1.0.2-16.el4_8.i386, bzip2-1.0.2-16.el4_8.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) bzip2-1.0.3-6.el5_5, bzip2-1.0.3-6.el5_5.i386, bzip2-libs-1.0.3-6.el5_5 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bzip2-1.0.3-6.el5_5, bzip2-devel-1.0.3-6.el5_5, bzip2-devel-1.0.3-6.el5_5.i386
- Red Hat Enterprise Linux Desktop version 4 bzip2-1.0.2-16.el4_8, bzip2-1.0.2-16.el4_8.i386, bzip2-devel-1.0.2-16.el4_8 +3
- Red Hat Enterprise Linux ES version 3 bzip2-1.0.2-14.EL3, bzip2-1.0.2-14.EL3.i386, bzip2-1.0.2-14.EL3.ia64 +6
- Red Hat Enterprise Linux ES version 4 bzip2-1.0.2-16.el4_8, bzip2-1.0.2-16.el4_8.i386, bzip2-1.0.2-16.el4_8.ia64 +6
- Red Hat Enterprise Linux WS version 3 bzip2-1.0.2-14.EL3, bzip2-1.0.2-14.EL3.i386, bzip2-1.0.2-14.EL3.ia64 +6
- Red Hat Enterprise Linux WS version 4 bzip2-1.0.2-16.el4_8, bzip2-1.0.2-16.el4_8.i386, bzip2-1.0.2-16.el4_8.ia64 +6
Fixes 1 record
Priority LOW 29
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code vi…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.03297 · Published 2010-09-28 · Fixed CWE-189
