UbuntuUpdates.org

Package "bzip2"

Name: bzip2

Description:

high-quality block-sorting file compressor - utilities
Latest version: 1.0.8-5.1ubuntu0.1
Release: noble (24.04)
Level: security
Repository: main
Homepage: https://sourceware.org/bzip2/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "bzip2"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "bzip2" in Noble

Repository Area Version
base main 1.0.8-5.1
updates main 1.0.8-5.1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.0.8-5.1ubuntu0.1 2026-08-31 07:07:40 UTC

bzip2 (1.0.8-5.1ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds write
    - debian/patches/CVE-2026-42250.patch: bzip2recover: Make sure to not
      process more than BZ_MAX_HANDLED_BLOCKS in bzip2recover.c.
    - CVE-2026-42250

 -- Shishir Subedi Thu, 27 Aug 2026 09:50:50 +0545
CVE-2026-42250 bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out‑of‑bounds w


About   -   Send Feedback to @ubuntu_updates