[ubuntu/xenial-security] bzip2 1.0.6-8ubuntu0.1 (Accepted)

[Leonidas S. Barbosa]

bzip2 (1.0.6-8ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2016-3189.patch: add
      a outFile NULL in order to fix a potential user-after-free
      in bzip2/recover.c.
    - CVE-2016-3189
  * SECURITY UPDATE: out-of-bounds write
    - debian/patches/CVE-2019-12900.patch: make sure
      nSelectors is not out of range in decompress.c.
    - CVE-2019-12900

Date: 2019-06-25 19:47:13.980793+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
https://launchpad.net/ubuntu/+source/bzip2/1.0.6-8ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.