Ubuntu 19.04/18.10/18.04/16.04 LTS: USN-4038-3 Bzip2 Regression Issue

ubuntu

July 4, 2019

USN-4038-1 introduced a regression in bzip2.

Summary

USN-4038-1 introduced a regression in bzip2.

Software Description:

- bzip2: high-quality block-sorting file compressor - utilities

Details:

USN-4038-1 fixed a vulnerability in bzip2. The update introduced a regression causing

bzip2 to incorrect raises CRC errors for some files.

We apologize for the inconvenience.

Original advisory details:

It was discovered that bzip2 incorrectly handled certain files.

An attacker could possibly use this issue to execute arbitrary code.

Topics Covered

security advisory security issue arbitrary code execution update instructions ubuntu regression bzip2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  bzip2                           1.0.6-9ubuntu0.19.04.1
  libbz2-1.0                      1.0.6-9ubuntu0.19.04.1

Ubuntu 18.10:
  bzip2                           1.0.6-9ubuntu0.18.10.1
  libbz2-1.0                      1.0.6-9ubuntu0.18.10.1

Ubuntu 18.04 LTS:
  bzip2                           1.0.6-8.1ubuntu0.2
  libbz2-1.0                      1.0.6-8.1ubuntu0.2

Ubuntu 16.04 LTS:
  bzip2                           1.0.6-8ubuntu0.2
  libbz2-1.0                      1.0.6-8ubuntu0.2

In general, a standard system update will make all the necessary changes.