Red Hat Security Advisory

RHSA-2024:8922

bzip2 security update

Released 2024-11-06 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) bzip2-1.0.6-27.el8_10, bzip2-devel-1.0.6-27.el8_10, bzip2-libs-1.0.6-27.el8_10

TI-2019-09657 CVE-2019-12900 · GHSA-j686-6fc2-2525

MEDIUM 60

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07977 Published 2019-06-19 Partial fix CWE-787