Logo
componentbzip2
Name
bzip2
Version
1.0.8
Type
library
Description
Very high-quality data compression program
Licenses
Apache-2.0 AND BSD-3-Clause AND GPL-3.0-or-later AND MS-PL AND Zlib AND bzip2-1.0.6
PURL
-
CPE
cpe:2.3:*:bzip:bzip2:1.0.8:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
kirkstone
1.0.8
scarthgap
1.0.8

Patches#


#
Title
Author
Resolve
1
fix 'bzip2 --version > /tmp/aaa 2>&1' hang
Hongxu Jia <hongxu.jia@windriver.com>
2
bzip2recover: Make sure to not process more than
Mark Wielaard <mark@klomp.org>
CVE-2026-42250

Vulnerabilities#


Name
Analysis
Description
Patched
bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out‑of‑bounds write to a global buffer, resulting in memory corruption and a crash (denial of service). This issue was fixed in bzip2 patch 35d122a3df8b0cc4082a4d89fdc6ee99f375fe67