Red Hat Security Advisory

RHSA-2024:10803

bzip2 security update

Released 2024-12-04 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.4) bzip2-devel-1.0.8-8.el9_4.1
Red Hat Enterprise Linux BaseOS EUS (v.9.4) bzip2-1.0.8-8.el9_4.1, bzip2-libs-1.0.8-8.el9_4.1

TI-2019-09657 CVE-2019-12900 · GHSA-j686-6fc2-2525

MEDIUM 60

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07977 Published 2019-06-19 Partial fix CWE-787