bzip2-1.0.6-28.el8_10

エラータID: AXSA:2025-9593:01

Release date: 
Thursday, January 30, 2025 - 13:33
Subject: 
bzip2-1.0.6-28.el8_10
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

The bzip2 packages contain a freely available, high-quality data compressor. It provides both standalone compression and decompression utilities, as well as a shared library for use with other programs.

Security Fix(es):

* bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail). (CVE-2019-12900)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2019-12900
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. bzip2-1.0.6-28.el8_10.src.rpm
    MD5: 02e0bb824ee722a04cfa20e80e02b117
    SHA-256: c8a81fa6bdd83032de315aa8a7d085e9765584bfec846c2f4879d05e87de629d
    Size: 787.18 kB

Asianux Server 8 for x86_64
  1. bzip2-1.0.6-28.el8_10.x86_64.rpm
    MD5: 285e0011a8320010fe50eb89a8297df8
    SHA-256: 9f9a4be90c6fcb841aaad9fd937cc7ae5b5a9b01ccb1d0a121178deb48d85c90
    Size: 59.34 kB
  2. bzip2-devel-1.0.6-28.el8_10.i686.rpm
    MD5: 72042641a2e4a9927bffe7d1c2e4a476
    SHA-256: 22927d7b1cbb9fc362499c0533b66c4f488f7af14f2e41140fb4497abbcf5b8e
    Size: 223.74 kB
  3. bzip2-devel-1.0.6-28.el8_10.x86_64.rpm
    MD5: b74173a4f1f1ae399b61f9e6046f43e9
    SHA-256: eb3f3a4a3226463cbbd11cfd656035719ae4a21a2fc6ad099eb23442d77ac2e4
    Size: 223.72 kB
  4. bzip2-libs-1.0.6-28.el8_10.i686.rpm
    MD5: a8b941455b48fe1b86b43326ac9fe5b4
    SHA-256: 649bb9a6fcf51e79306e699261968513e48b6d76c373bd723866c7eea8572845
    Size: 47.95 kB
  5. bzip2-libs-1.0.6-28.el8_10.x86_64.rpm
    MD5: b61ceb52ae0a9fd18b718b0596974c39
    SHA-256: fb6083a1188606af674146a213acbb997c505725cedbe036934fb257cd077cc6
    Size: 47.12 kB