bzip2-1.0.8-10.el9_5

エラータID: AXSA:2025-9645:02

Release date: 
Thursday, February 13, 2025 - 10:45
Subject: 
bzip2-1.0.8-10.el9_5
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

The bzip2 packages contain a freely available, high-quality data compressor. It provides both standalone compression and decompression utilities, as well as a shared library for use with other programs.

Security Fix(es):

* bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail). (CVE-2019-12900)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2019-12900
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. bzip2-1.0.8-10.el9_5.src.rpm
    MD5: 875c42827e9465f9fd690bd1a31ceaad
    SHA-256: a95859a8570afc637dd2f6f4f6a77dbc42f3239f601ea04219ab5c97ccef3a30
    Size: 802.34 kB

Asianux Server 9 for x86_64
  1. bzip2-1.0.8-10.el9_5.x86_64.rpm
    MD5: 41175acb4891e5daa72c1990e1bd582c
    SHA-256: c491c01caf78169faaff1fa6b9676e9c75a8b72f63dbf7af47aee40f585703b2
    Size: 55.42 kB
  2. bzip2-devel-1.0.8-10.el9_5.i686.rpm
    MD5: 09480765ffa4c1f71ddbcd2ee9b4e498
    SHA-256: a5a728fabda7343fbc6c73a5d57f296f0b0cdb2e1449336f97a2ed8523f345da
    Size: 212.93 kB
  3. bzip2-devel-1.0.8-10.el9_5.x86_64.rpm
    MD5: e76aab01bf7fe291f11f9696f765b270
    SHA-256: db93c262e093dc19c8763a984de85724d98110adcac984d37d7c7f2e8401c0ae
    Size: 212.92 kB
  4. bzip2-libs-1.0.8-10.el9_5.i686.rpm
    MD5: 66bf06e3dbd1f9137eb8176eb48b9b40
    SHA-256: 0920bbf02859c75a767f8d830d72c22e38f3ba4faddab23da7f743e5f1f8c764
    Size: 39.17 kB
  5. bzip2-libs-1.0.8-10.el9_5.x86_64.rpm
    MD5: 72aa8eedcae490495e77b9813858081a
    SHA-256: 32e52cd7f3cfb65b333b5d7a5e14e66b1ae2db3dd89fc45f8f538e71f0c92b2c
    Size: 39.00 kB