Oracle Linux: CVE-2019-12900: ELSA-2024-8922: bzip2 security update (LOW) (Multiple Advisories)

Oracle Linux: CVE-2019-12900: ELSA-2024-8922:bzip2 security update (LOW) (Multiple Advisories)

Severity

2

CVSS

(AV:L/AC:L/Au:S/C:N/I:P/A:N)

Published

11/11/2024

Created

11/13/2024

Added

11/11/2024

Modified

02/11/2025

Description

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

Solution(s)

• oracle-linux-upgrade-bzip2
• oracle-linux-upgrade-bzip2-devel
• oracle-linux-upgrade-bzip2-libs

References

• https://attackerkb.com/topics/cve-2019-12900
• CVE - 2019-12900
• ELSA-2024-8922
• ELSA-2025-0733
• ELSA-2025-0925