[ubuntu/xenial-security] bzip2 1.0.6-8ubuntu0.1 (Accepted)

Leonidas S. Barbosa leo.barbosa at canonical.com
Wed Jun 26 12:15:57 UTC 2019


bzip2 (1.0.6-8ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2016-3189.patch: add
      a outFile NULL in order to fix a potential user-after-free
      in bzip2/recover.c.
    - CVE-2016-3189
  * SECURITY UPDATE: out-of-bounds write
    - debian/patches/CVE-2019-12900.patch: make sure
      nSelectors is not out of range in decompress.c.
    - CVE-2019-12900

Date: 2019-06-25 19:47:13.980793+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
https://launchpad.net/ubuntu/+source/bzip2/1.0.6-8ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the Xenial-changes mailing list