RHEL 3 / 4 / 5 : bzip2 (RHSA-2010:0703)

Updated bzip2 packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

bzip2 -- integer overflow vulnerability

Secunia reports: A vulnerability has been reported in bzip2, which can be exploited by malicious people to cause a DoS Denial of Service or potentially compromise a vulnerable system. The vulnerability is caused due to an integer overflow in the "BZ2decompress" function in decompress.c and can be...

Mandriva Linux Security Advisory : bzip2 (MDVSA-2010:185)

An integer overflow has been found and corrected in bzip2 which could be exploited by using a specially crafted bz2 file and cause a denial of service attack CVE-2010-0405. Additionally clamav has been upgraded to 0.96.2 and has been patched for this issue. perl-Compress-Bzip2 in MES5 has been...

Debian DSA-2112-1 : bzip2 - integer overflow

Mikolaj Izdebski has discovered an integer overflow flaw in the BZ2decompress function in bzip2/libbz2. An attacker could use a crafted bz2 file to cause a denial of service application crash or potentially to execute arbitrary code. CVE-2010-0405 %NASLMINLEVEL 70300 C Tenable Network Security,...

[slackware-security] bzip2

New bzip2 packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/bzip2-1.0.6-i486-1slack13.1.txz: Upgraded. This update fixes an intege...

USN-986-3: dpkg vulnerability

USN-986-1 fixed vulnerabilities in bzip2. dpkg statically links against libbz2 and needed to be rebuilt to use the updated libbz2. Original advisory details: An integer overflow was discovered in bzip2. If a user or automated system were tricked into decompressing a crafted bz2 file, an attacker...

USN-986-2: ClamAV vulnerability

USN-986-1 fixed a vulnerability in bzip2. This update provides the corresponding update for ClamAV. Original advisory details: An integer overflow was discovered in bzip2. If a user or automated system were tricked into decompressing a crafted bz2 file, an attacker could cause bzip2 or any...

USN-986-1: bzip2 vulnerability

An integer overflow was discovered in bzip2. If a user or automated system were tricked into decompressing a crafted bz2 file, an attacker could cause bzip2 or any application linked against libbz2 to crash or possibly execute code as the user running the program...

[SECURITY] [DSA-2112-1] New bzip2 packages fix integer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-2112-1 [email protected] http://www.debian.org/security/ Stefan Fritsch September 20, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2112-1] New bzip2 packages fix integer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-2112-1 [email protected] http://www.debian.org/security/ Stefan Fritsch September 20, 2010 http://www.debian.org/security/faq -...

[USN-986-1] bzip2 vulnerability

=========================================================== Ubuntu Security Notice USN-986-1 September 20, 2010 bzip2 vulnerability CVE-2010-0405 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS...

bzip2 security update

1.0.3-6 - Related: 632173 use the upstream patch 1.0.3-5 - Resolves: 632173 integer overflow flaw in BZ2decompress - CVE-2010-0405...

FreeBSD-SA-10:08.bzip2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-10:08.bzip2 Security Advisory The FreeBSD Project Topic: Integer overflow in bzip2 decompression Category: contrib Module: bzip2 Announced: 2010-09-20 Credits:...

DSA-2112-1 bzip2 - integer overflow

Bulletin has no description...

Security fix for the ALT Linux 5 package bzip2 version 1:1.0.6-alt1

Sept. 20, 2010 Dmitry V. Levin 1:1.0.6-alt1 - Updated to 1.0.6 fixes CVE-2010-0405...

FreeBSD -- Integer overflow in bzip2 decompression

Problem Description: When decompressing data, the run-length encoded values are not adequately sanity-checked, allowing for an integer overflow...

Mandriva Linux Security Advisory : perl-Compress-Raw-Bzip2 (MDVSA-2009:207)

A vulnerability has been found and corrected in perl-Compress-Raw-Bzip : Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service application hang or crash via a crafted bzip2...

Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003

The remote host is missing Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003. One or more of the following components are affected: bzip2 CFNetwork ColorSync CoreTypes Dock Image RAW ImageIO Kernel launchd Login Window MobileMe Networking XQuery OpenVAS Vulnerability Test Mac OS X 10.5.8...

Memory corruption

Disk Images in Apple Mac OS X before 10.6.3 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted disk image with bzip2 compression...

CVE-2010-0065

Disk Images in Apple Mac OS X before 10.6.3 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted disk image with bzip2 compression...