USN-4038-3: bzip2 regression
Published Jul 4, 2019
·Updated
USN-4038-1 fixed a vulnerability in bzip2. The update introduced a regression causing bzip2 to incorrect raises CRC errors for some files. We apologize for the inconvenience. Original advisory details: It was discovered that bzip2 incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code.
Affected Software
16 affected componentsFixes available
All of the following
ubuntu/bzip2<1.0.6-9ubuntu0.19.04.1
1.0.6-9ubuntu0.19.04.1
Ubuntu Ubuntu=19.04
All of the following
ubuntu/libbz2-1.0<1.0.6-9ubuntu0.19.04.1
1.0.6-9ubuntu0.19.04.1
Ubuntu Ubuntu=19.04
All of the following
ubuntu/bzip2<1.0.6-9ubuntu0.18.10.1
1.0.6-9ubuntu0.18.10.1
Ubuntu Ubuntu=18.10
All of the following
ubuntu/libbz2-1.0<1.0.6-9ubuntu0.18.10.1
1.0.6-9ubuntu0.18.10.1
Ubuntu Ubuntu=18.10
All of the following
ubuntu/bzip2<1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libbz2-1.0<1.0.6-8.1ubuntu0.2
1.0.6-8.1ubuntu0.2
Ubuntu Ubuntu=18.04
All of the following
ubuntu/bzip2<1.0.6-8ubuntu0.2
1.0.6-8ubuntu0.2
Ubuntu Ubuntu=16.04
All of the following
ubuntu/libbz2-1.0<1.0.6-8ubuntu0.2
1.0.6-8ubuntu0.2
Ubuntu Ubuntu=16.04
Event History
Jul 4, 2019
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What was the vulnerability fixed in USN-4038-1?
USN-4038-1 fixed a vulnerability in bzip2.
2
What is the regression introduced in USN-4038-3?
The update introduced a regression causing bzip2 to incorrectly raise CRC errors for some files.
3
Which versions of bzip2 are affected by the regression?
bzip2 versions 1.0.6-9ubuntu0.19.04.1, 1.0.6-9ubuntu0.18.10.1, 1.0.6-8.1ubuntu0.2 are affected.
4
How can I fix the regression in bzip2?
To fix the regression in bzip2,update to version 1.0.6-9ubuntu0.19.04.1 or higher.
5
Where can I find more information about USN-4038-3?
You can find more information about USN-4038-3 on the Ubuntu Launchpad website.