Ubuntu 4038-1 Denial of Service: Bzip2 Critical Security Advisory

ubuntu

June 26, 2019

Several security issues were fixed in bzip2.

Summary

Several security issues were fixed in bzip2.

Software Description:

- bzip2: high-quality block-sorting file compressor - utilities

Details:

Aladdin Mubaied discovered that bzip2 incorrectly handled certain files.

An attacker could possibly use this issue to cause a denial of service.

This issue only affected Ubuntu 16.04 LTS. (CVE-2016-3189)

It was discovered that bzip2 incorrectly handled certain files.

An attacker could possibly use this issue to execute arbitrary code.

(CVE-2019-12900)

Topics Covered

security advisory denial of service arbitrary code execution ubuntu bzip2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  bzip2                           1.0.6-9ubuntu0.19.04
  libbz2-1.0                      1.0.6-9ubuntu0.19.04

Ubuntu 18.10:
  bzip2                           1.0.6-9ubuntu0.18.10
  libbz2-1.0                      1.0.6-9ubuntu0.18.10

Ubuntu 18.04 LTS:
  bzip2                           1.0.6-8.1ubuntu0.1
  libbz2-1.0                      1.0.6-8.1ubuntu0.1

Ubuntu 16.04 LTS:
  bzip2                           1.0.6-8ubuntu0.1
  libbz2-1.0                      1.0.6-8ubuntu0.1

In general, a standard system update will make all the necessary changes.