CLSA-2026-1788430930
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1788430930.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1788430930
- Upstream
- CVE-2026-42250
- Published
- 2026-09-03T10:22:20Z
- Modified
- 2026-10-26T09:32:04Z
- Summary
- Fix CVE(s): CVE-2026-42250
- Details
-
- SECURITY UPDATE: out-of-bounds read and write in bzip2recover when a
.bz2 file yields more than BZ_MAX_HANDLED_BLOCKS block boundaries
(ELSCVE-178967)
- debian/patches/CVE-2026-42250.patch: correct the off-by-one in the block-count guard in bzip2recover.c, so the scanning loop stops one block earlier instead of indexing one past bStart, bEnd, rbStart and rbEnd.
- CVE-2026-42250
- SECURITY UPDATE: out-of-bounds read and write in bzip2recover when a
.bz2 file yields more than BZ_MAX_HANDLED_BLOCKS block boundaries
(ELSCVE-178967)
- References
Affected packages
TuxCare:Ubuntu:18.04 / bzip2
Package
- Name
- bzip2
- Purl
- pkg:deb/tuxcare/bzip2?distro=ubuntu-18.04
TuxCare:Ubuntu:18.04 / bzip2-doc
Package
- Name
- bzip2-doc
- Purl
- pkg:deb/tuxcare/bzip2-doc?distro=ubuntu-18.04
TuxCare:Ubuntu:18.04 / libbz2-1.0
Package
- Name
- libbz2-1.0
- Purl
- pkg:deb/tuxcare/libbz2-1.0?distro=ubuntu-18.04