USN-4038-2: bzip2 vulnerabilities
USN-4038-1 fixed several vulnerabilities in bzip2. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Aladdin Mubaied discovered that bzip2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2016-3189) It was discovered that bzip2 incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2019-12900)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/bzip2to a version that resolves this vulnerability.Fixed in 1.0.6-5ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/lib32bz2-1.0to a version that resolves this vulnerability.Fixed in 1.0.6-5ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/lib64bz2-1.0to a version that resolves this vulnerability.Fixed in 1.0.6-5ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/libbz2-1.0to a version that resolves this vulnerability.Fixed in 1.0.6-5ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/bzip2to a version that resolves this vulnerability.Fixed in 1.0.6-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/lib32bz2-1.0to a version that resolves this vulnerability.Fixed in 1.0.6-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/lib64bz2-1.0to a version that resolves this vulnerability.Fixed in 1.0.6-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/libbz2-1.0to a version that resolves this vulnerability.Fixed in 1.0.6-1ubuntu0.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-4038-2
Event History
Frequently Asked Questions
What is the vulnerability ID for this bzip2 vulnerability?
The vulnerability ID for this bzip2 vulnerability is USN-4038-2.
What is the severity of the USN-4038-2 vulnerability?
The severity of the USN-4038-2 vulnerability is not mentioned in the provided information.
Which software versions are affected by the USN-4038-2 vulnerability?
The USN-4038-2 vulnerability affects Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
How do I fix the USN-4038-2 vulnerability?
To fix the USN-4038-2 vulnerability, update the affected software to the recommended version: bzip2 1.0.6-5ubuntu0.1~esm1 (for Ubuntu 12.04 ESM) or bzip2 1.0.6-5ubuntu0.1~esm1 (for Ubuntu 14.04 ESM).
Where can I find more information about the USN-4038-2 vulnerability?
You can find more information about the USN-4038-2 vulnerability in the following references: [CVE-2016-3189](https://ubuntu.com/security/CVE-2016-3189), [CVE-2019-12900](https://ubuntu.com/security/CVE-2019-12900), [USN-4038-1](https://ubuntu.com/security/notices/USN-4038-1).