Release date:
2026-09-03 10:22:20 UTC
Description:
* SECURITY UPDATE: out-of-bounds read and write in bzip2recover when a
.bz2 file yields more than BZ_MAX_HANDLED_BLOCKS block boundaries
(ELSCVE-178967)
- debian/patches/CVE-2026-42250.patch: correct the off-by-one in the
block-count guard in bzip2recover.c, so the scanning loop stops one
block earlier instead of indexing one past bStart, bEnd, rbStart
and rbEnd.
- CVE-2026-42250
Updated packages:
-
bzip2_1.0.6-8.1ubuntu0.2+tuxcare.els1_amd64.deb
sha:d1d598ce9bf5b740d09282bc291d27d82fdf4806
-
bzip2-doc_1.0.6-8.1ubuntu0.2+tuxcare.els1_all.deb
sha:976d281528e33411967000a242c9e6f4de3658d0
-
libbz2-1.0_1.0.6-8.1ubuntu0.2+tuxcare.els1_amd64.deb
sha:78a65b9770a4f17f96cc12778a6600a1d707b83a
-
libbz2-dev_1.0.6-8.1ubuntu0.2+tuxcare.els1_amd64.deb
sha:9bde1d34bb9d620c8f9604ee2bca3b845d2e86a9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
