UbuntuUpdates.org

Package "libbz2-dev"

Name: libbz2-dev

Description:

high-quality block-sorting file compressor library - development
Latest version: 1.0.6-8.1ubuntu0.2
Release: bionic (18.04)
Level: updates
Repository: main
Head package: bzip2
Homepage: http://www.bzip.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libbz2-dev"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libbz2-dev" in Bionic

Repository Area Version
base main 1.0.6-8.1
security main 1.0.6-8.1ubuntu0.2

Changelog

Version: 1.0.6-8.1ubuntu0.2 2019-07-04 15:07:31 UTC

  bzip2 (1.0.6-8.1ubuntu0.2) bionic-security; urgency=medium

  * SECURITY REGRESSION: bzip2 update for CVE-2019-12900 causes some files raises
    incorrect CRC error. (LP: #1834494)
    - debian/patches/Accept-as-many-selectors-as-selectors*.patch

 -- <email address hidden> (Leonidas S. Barbosa) Thu, 04 Jul 2019 09:35:36 -0300
Source diff to previous version
1834494 latest bzip2 reports crc errors incorrectly
CVE-2019-12900 BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

Version: 1.0.6-8.1ubuntu0.1 2019-06-26 15:06:53 UTC

  bzip2 (1.0.6-8.1ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds write
    - debian/patches/CVE-2019-12900.patch: make sure
      nSelectors is not out of range in decompress.c.
    - CVE-2019-12900

 -- <email address hidden> (Leonidas S. Barbosa) Mon, 24 Jun 2019 15:56:48 -0300
CVE-2019-12900 BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.


About   -   Send Feedback to @ubuntu_updates