RHSA-2010:0858: Important: bzip2 security update
bzip2 is a freely available, high-quality data compressor. It provides bothstandalone compression and decompression utilities, as well as a sharedlibrary for use with other programs.An integer overflow flaw was discovered in the bzip2 decompression routine.This issue could, when decompressing malformed archives, cause bzip2, or anapplication linked against the libbz2 library, to crash or, potentially,execute arbitrary code. (CVE-2010-0405)Users of bzip2 should upgrade to these updated packages, which contain abackported patch to resolve this issue. All running applications using thelibbz2 library must be restarted for the update to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2010:0858?
The severity of RHSA-2010:0858 is classified as important.
How do I fix RHSA-2010:0858?
To resolve RHSA-2010:0858, update bzip2 and related packages to version 1.0.5-7.el6_0 or later.
What causes the vulnerability in RHSA-2010:0858?
The vulnerability in RHSA-2010:0858 is caused by an integer overflow flaw in the bzip2 decompression routine.
Which packages are affected by RHSA-2010:0858?
The affected packages in RHSA-2010:0858 include bzip2, bzip2-debuginfo, bzip2-devel, and bzip2-libs.
Is there a workaround for RHSA-2010:0858?
There is no official workaround for RHSA-2010:0858; updating to a secure version is recommended.