Skip to content
OpenAdvisories
Medium USN-8685-1 1 CVE

bzip2 vulnerability

Published Aug 27, 2026 · Updated Sep 1, 2026

Ecosystem: Ubuntu

Summary

It was discovered that bzip2 did not properly manage memory under certain
circumstances. An attacker could possibly use this issue to cause a crash,
resulting in a denial of service.

Fixed packages 7

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS bzip2 1.0.8-5ubuntu0.1
Ubuntu · 24.04 LTS 24.04:LTS bzip2 1.0.8-5.1ubuntu0.1
Ubuntu · 26.04 LTS 26.04:LTS bzip2 1.0.8-6ubuntu0.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS bzip2 1.0.6-5ubuntu0.1~esm3
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS bzip2 1.0.6-8ubuntu0.2+esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS bzip2 1.0.6-8.1ubuntu0.2+esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS bzip2 1.0.8-2ubuntu0.1~esm1

Vulnerabilities 1

  • Medium 4.8
    CVE-2026-42250

    Off-by-One Leading to Out-of-Bounds Write in bzip2

    bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out‑of‑bounds write to a global buffer, resulting in memory corruption and a crash (denial of service). This issue was fixed …

    bzip2 bzip2 kata-containers-cc bzip2 Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2026-42250