Critical DLA-1833-1 2 CVEs

bzip2 - security update

Published Jun 24, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	bzip2	1.0.6-7+deb8u1

Vulnerabilities 2

Critical 9.8

CVE-2019-12900

out-of-bounds write when there are many bzip2 selectors

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

clamav clamav bzip2 bzip2 Debian Ubuntu Alpine Hackage

Jun 19, 2019
Medium 6.5

CVE-2016-3189 EPSS 16%

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash…

bzip2 bzip2 bzip2 Debian Ubuntu Alpine

Jun 30, 2016