Red Hat Security AdvisoryRHSA-2010:0858
bzip2 security update
Released 2010-11-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) bzip2-1.0.5-7.el6_0, bzip2-libs-1.0.5-7.el6_0
- Red Hat Enterprise Linux Desktop Optional (v. 6) bzip2-1.0.5-7.el6_0, bzip2-devel-1.0.5-7.el6_0
- Red Hat Enterprise Linux HPC Node (v. 6) bzip2-1.0.5-7.el6_0, bzip2-libs-1.0.5-7.el6_0
- Red Hat Enterprise Linux HPC Node Optional (v. 6) bzip2-1.0.5-7.el6_0, bzip2-devel-1.0.5-7.el6_0
- Red Hat Enterprise Linux Server (v. 6) bzip2-1.0.5-7.el6_0, bzip2-devel-1.0.5-7.el6_0, bzip2-devel-1.0.5-7.el6_0.ppc +2
- Red Hat Enterprise Linux Workstation (v. 6) bzip2-1.0.5-7.el6_0, bzip2-devel-1.0.5-7.el6_0, bzip2-libs-1.0.5-7.el6_0
Fixes 1 record
Priority LOW 29
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code vi…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.03297 · Published 2010-09-28 · Fixed CWE-189
