Scientific Linux: Important Bzip2 Security Update CVE-2010-0405

Date: Tue, 21 Sep 2010 11:10:42 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA Important: bzip2on SL3.x, SL4.x,
 SL5.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

Synopsis:	Important: bzip2 security update
Issue date:	2010-09-20
CVE Names:	CVE-2010-0405

An integer overflow flaw was discovered in the bzip2 decompression
routine. This issue could, when decompressing malformed archives, cause
bzip2, or an application linked against the libbz2 library, to crash or,
potentially, execute arbitrary code. (CVE-2010-0405)

All running applications using the libbz2 library must be restarted for
the update to take effect.

SL 3.0.x

 SRPMS:
bzip2-1.0.2-14.EL3.src.rpm
 i386:
bzip2-1.0.3-6.el5_5.i386.rpm
bzip2-devel-1.0.3-6.el5_5.i386.rpm
bzip2-libs-1.0.3-6.el5_5.i386.rpm
 x86_64:
bzip2-1.0.3-6.el5_5.x86_64.rpm
bzip2-devel-1.0.3-6.el5_5.i386.rpm
bzip2-devel-1.0.3-6.el5_5.x86_64.rpm
bzip2-libs-1.0.3-6.el5_5.i386.rpm
bzip2-libs-1.0.3-6.el5_5.x86_64.rpm

SL 4.x

 SRPMS:
bzip2-1.0.2-16.el4_8.src.rpm
 i386:
bzip2-1.0.2-16.el4_8.i386.rpm
bzip2-devel-1.0.2-16.el4_8.i386.rpm
bzip2-libs-1.0.2-16.el4_8.i386.rpm
 x86_64:
bzip2-1.0.2-16.el4_8.x86_64.rpm
bzip2-devel-1.0.2-16.el4_8.i386.rpm
bzip2-devel-1.0.2-16.el4_8.x86_64.rpm
bzip2-libs-1.0.2-16.el4_8.i386.rpm
bzip2-libs-1.0.2-16.el4_8.x86_64.rpm

SL 5.x

 SRPMS:
bzip2-1.0.3-6.el5_5.src.rpm
 i386:
bzip2-1.0.2-14.EL3.i386.rpm
bzip2-devel-1.0.2-14.EL3.i386.rpm
bzip2-libs-1.0.2-14.EL3.i386.rpm
 x86_64:
bzip2-1.0.2-14.EL3.x86_64.rpm
bzip2-devel-1.0.2-14.EL3.x86_64.rpm
bzip2-libs-1.0.2-14.EL3.i386.rpm
bzip2-libs-1.0.2-14.EL3.x86_64.rpm

-Connie Sieh
-Troy Dawson