All errata/sisyphus/ALT-PU-2020-1417-2
ALT-PU-2020-1417-2

Package update bzip2 in branch sisyphus

Version1.0.8-alt1
Task#247226
Published2026-03-07
Max severityCRITICAL
Severity:

Closed issues (2)

BDU:2019-02881
HIGH8.6

Уязвимость функции BZ2_decompress утилиты для сжатия данных bzip2, позволяющая нарушителю выполнить произвольный код

Published: 2019-08-16Modified: 2025-11-19
CVSS 3.xHIGH 8.6
CVSS:3.x/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS 2.0HIGH 7.2
CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:C
References
CVE-2019-12900
CRITICAL9.8

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

Published: 2019-06-19Modified: 2025-06-09
CVSS 2.0HIGH 7.5
CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS 3.xCRITICAL 9.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References