Summary
[1.0.6-28]
- The previous fix caused some regressions
- Use an updated patch that deals with the original issue+the regressions
Resolves: RHEL-71140
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bzip2 | 0:1.0.6-28.el8_10 |
| Oracle Linux · 8 | bzip2-devel | 0:1.0.6-28.el8_10 |
| Oracle Linux · 8 | bzip2-libs | 0:1.0.6-28.el8_10 |
Vulnerabilities 1
-
Critical 9.8
out-of-bounds write when there are many bzip2 selectors
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.