io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

A flaw was found in the netty-codec-compression component of Netty. This vulnerability, caused by a logic error in the bzip2 decoder, allows a remote attacker to send specially crafted bzip2-compressed data. Processing this malformed data can trigger an infinite loop, causing the decoder thread t...

SUSE SLED15 / SLES15 Security Update : bzip2 (SUSE-SU-2026:4055-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4055-1 advisory. This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the bzip2recover utility when...

EulerOS Virtualization 2.12.1 : bzip2 (EulerOS-SA-2026-3577)

According to the versions of the bzip2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an...

EulerOS Virtualization 2.12.0 : bzip2 (EulerOS-SA-2026-3631)

According to the versions of the bzip2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an...

EulerOS 2.0 SP15 : bzip2 (EulerOS-SA-2026-3776)

According to the versions of the bzip2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an outofbounds wri...

EulerOS 2.0 SP15 : bzip2 (EulerOS-SA-2026-3801)

According to the versions of the bzip2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an outofbounds wri...

Updated bzip2 packages fix a security vulnerability

Off-by-One Leading to Out-of-Bounds Write in bzip2. CVE-2026-42250...

MGASA-2026-0403 Updated bzip2 packages fix a security vulnerability

Off-by-One Leading to Out-of-Bounds Write in bzip2. CVE-2026-42250...

Astra Linux – Vulnerability in Netty

The Bzip2 decompression decoder function does not allow setting size restrictions on the decompressed output data which affects the allocation size used during decompression. This affects all users of Bzip2Decoder. Malicious inputs can trigger an OOME, thereby causing a DoS attack...

Astra Linux – Vulnerability in bzip2

The vulnerability of the Bzip2 data compression utility is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

BIT-LIBPYTHON-2026-15310 zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...

EulerOS 2.0 SP12 : bzip2 (EulerOS-SA-2026-3250)

According to the versions of the bzip2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an outofbounds wri...

Security update for bzip2 (low)

openSUSE security update: security update for bzip2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21762-1 Rating: low References: bsc1266786 Cross-References: CVE-2026-42250 CVSS scores: CVE-2026-42250 SUSE : 3.3...

EulerOS 2.0 SP12 : bzip2 (EulerOS-SA-2026-3325)

According to the versions of the bzip2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an outofbounds wri...

SUSE-SU-2026:23494-1 Security update for bzip2

This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file can lead to a crash bsc1266786...

OPENSUSE-SU-2026:21762-1 Security update for bzip2

This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file can lead to a crash bsc1266786...

Security update for bzip2

This update for bzip2 fixes the following issue: CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file can lead to a crash bsc1266786. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupda...

SUSE-SU-2026:3925-1 Security update for bzip2

This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file can lead to a crash bsc1266786...

SUSE-SU-2026:23442-1 Security update for bzip2

This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file can lead to a crash bsc1266786...

bzip2-1.0.8-6.1 on GA media (moderate)

bzip2-1.0.8-6.1 on GA media Announcement ID: openSUSE-SU-2026:11627-1 Rating: moderate Cross-References: CVE-2026-42250 CVSS scores: CVE-2026-42250 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2026-42250 SUSE : 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N...