Release date:
2026-09-07 21:14:57 UTC
Description:
* SECURITY UPDATE: out-of-bounds read and write in bzip2recover when a
.bz2 file yields more than BZ_MAX_HANDLED_BLOCKS block boundaries
(ELSCVE-178964)
- debian/patches/CVE-2026-42250.patch: correct the off-by-one in the
block-count guard in bzip2recover.c, so the scanning loop stops one
block earlier instead of indexing one past bStart, bEnd, rbStart
and rbEnd.
- CVE-2026-42250
Updated packages:
-
bzip2_1.0.6-8ubuntu0.2+tuxcare.els1_amd64.deb
sha:22fd365d269facde70d132a5659e74f25851c879
-
bzip2-doc_1.0.6-8ubuntu0.2+tuxcare.els1_all.deb
sha:c001f238cca7baaa8788fb1c2394341ef886b92e
-
libbz2-1.0_1.0.6-8ubuntu0.2+tuxcare.els1_amd64.deb
sha:fa43db8cb834030cadf8192eedfc7e4cac74135d
-
libbz2-dev_1.0.6-8ubuntu0.2+tuxcare.els1_amd64.deb
sha:1b325e03b5838efce8d844ba49f57aad769562e2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
