Medium ELSA-2025-0925 1 CVE

Moderate: bzip2 security update (Oracle Linux 9)

Published Feb 3, 2025 · Updated Feb 3, 2025

Ecosystem: Oracle Linux

Summary

[1.0.8-10]
- Revert the previous commit (introduced a regression)
Resolves: CVE-2019-12900

[1.0.8-9]
- Fix out of bounds access in BZ2_decompress
Resolves: RHEL-65198

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 9	bzip2	0:1.0.8-10.el9_5
Oracle Linux · 9	bzip2-devel	0:1.0.8-10.el9_5
Oracle Linux · 9	bzip2-libs	0:1.0.8-10.el9_5

Vulnerabilities 1

Critical 9.8

CVE-2019-12900

out-of-bounds write when there are many bzip2 selectors

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

clamav clamav bzip2 bzip2 Debian Ubuntu Alpine Hackage

Jun 19, 2019