Skip to content
OpenAdvisories
Unscored RHSA-2005:474 3 CVEs

Red Hat Security Advisory: bzip2 security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as bzip2 0:1.0.2-11.EL3.4
Red Hat · RHEL 3 enterprise_linux:3::as bzip2-debuginfo 0:1.0.2-11.EL3.4
Red Hat · RHEL 3 enterprise_linux:3::as bzip2-devel 0:1.0.2-11.EL3.4
Red Hat · RHEL 3 enterprise_linux:3::as bzip2-libs 0:1.0.2-11.EL3.4
Red Hat · RHEL 3 enterprise_linux:3::desktop bzip2 0:1.0.2-11.EL3.4
Red Hat · RHEL 3 enterprise_linux:3::desktop bzip2-debuginfo 0:1.0.2-11.EL3.4
Red Hat · RHEL 3 enterprise_linux:3::desktop bzip2-devel 0:1.0.2-11.EL3.4
Red Hat · RHEL 3 enterprise_linux:3::desktop bzip2-libs 0:1.0.2-11.EL3.4
Red Hat · RHEL 3 enterprise_linux:3::es bzip2 0:1.0.2-11.EL3.4
Red Hat · RHEL 3 enterprise_linux:3::es bzip2-debuginfo 0:1.0.2-11.EL3.4
Red Hat · RHEL 3 enterprise_linux:3::es bzip2-devel 0:1.0.2-11.EL3.4
Red Hat · RHEL 3 enterprise_linux:3::es bzip2-libs 0:1.0.2-11.EL3.4
Red Hat · RHEL 3 enterprise_linux:3::ws bzip2 0:1.0.2-11.EL3.4
Red Hat · RHEL 3 enterprise_linux:3::ws bzip2-debuginfo 0:1.0.2-11.EL3.4
Red Hat · RHEL 3 enterprise_linux:3::ws bzip2-devel 0:1.0.2-11.EL3.4
Red Hat · RHEL 3 enterprise_linux:3::ws bzip2-libs 0:1.0.2-11.EL3.4
Red Hat · RHEL 4 enterprise_linux:4::as bzip2 0:1.0.2-13.EL4.3
Red Hat · RHEL 4 enterprise_linux:4::as bzip2-debuginfo 0:1.0.2-13.EL4.3
Red Hat · RHEL 4 enterprise_linux:4::as bzip2-devel 0:1.0.2-13.EL4.3
Red Hat · RHEL 4 enterprise_linux:4::as bzip2-libs 0:1.0.2-13.EL4.3
Red Hat · RHEL 4 enterprise_linux:4::desktop bzip2 0:1.0.2-13.EL4.3
Red Hat · RHEL 4 enterprise_linux:4::desktop bzip2-debuginfo 0:1.0.2-13.EL4.3
Red Hat · RHEL 4 enterprise_linux:4::desktop bzip2-devel 0:1.0.2-13.EL4.3
Red Hat · RHEL 4 enterprise_linux:4::desktop bzip2-libs 0:1.0.2-13.EL4.3
Red Hat · RHEL 4 enterprise_linux:4::es bzip2 0:1.0.2-13.EL4.3
Red Hat · RHEL 4 enterprise_linux:4::es bzip2-debuginfo 0:1.0.2-13.EL4.3
Red Hat · RHEL 4 enterprise_linux:4::es bzip2-devel 0:1.0.2-13.EL4.3
Red Hat · RHEL 4 enterprise_linux:4::es bzip2-libs 0:1.0.2-13.EL4.3
Red Hat · RHEL 4 enterprise_linux:4::ws bzip2 0:1.0.2-13.EL4.3
Red Hat · RHEL 4 enterprise_linux:4::ws bzip2-debuginfo 0:1.0.2-13.EL4.3
Red Hat · RHEL 4 enterprise_linux:4::ws bzip2-devel 0:1.0.2-13.EL4.3
Red Hat · RHEL 4 enterprise_linux:4::ws bzip2-libs 0:1.0.2-13.EL4.3

Vulnerabilities 3

  • Unscored —
    CVE-2005-0758

    zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands…

    gzip bzip2 Debian
  • Unscored —
    CVE-2005-0953

    Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link a…

    bzip2 Debian
  • Unscored —
    CVE-2005-1260

    bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that cause…

    bzip2 Debian

References

  • article
    http://scary.beasts.org/security/CESA-2005-002.txt
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=155742
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=157548
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=159816
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_474.json
  • report
    https://access.redhat.com/security/cve/CVE-2005-0758
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617573
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0758
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0758
  • report
    https://access.redhat.com/security/cve/CVE-2005-0953
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617590
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0953
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0953
  • report
    https://access.redhat.com/security/cve/CVE-2005-1260
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617617
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-1260
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-1260