Search for packages
Package details: pkg:deb/debian/bzip2@1.0.5-6%2Bsqueeze1
purl pkg:deb/debian/bzip2@1.0.5-6%2Bsqueeze1
Next non-vulnerable version 1.0.6-9.2~deb10u1
Latest non-vulnerable version 1.0.6-9.2~deb10u1
Risk 8.2
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-8urm-9ubj-aaac
Aliases:
CVE-2019-12900
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
1.0.6-9
Affected by 1 other vulnerability.
1.0.6-9.2~deb10u1
Affected by 0 other vulnerabilities.
VCID-an3m-4v53-aaaa
Aliases:
CVE-2011-4089
The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory.
1.0.6-4
Affected by 2 other vulnerabilities.
VCID-ftyp-se1c-aaab
Aliases:
CVE-2016-3189
Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.
1.0.6-8.1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-pvq7-umur-aaag Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file. CVE-2010-0405

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T15:18:11.794033+00:00 Debian Oval Importer Fixing VCID-pvq7-umur-aaag https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T14:55:13.407933+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T14:21:35.893592+00:00 Debian Oval Importer Affected by VCID-8urm-9ubj-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T13:33:59.097665+00:00 Debian Oval Importer Affected by VCID-ftyp-se1c-aaab https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T01:07:02.441450+00:00 Debian Oval Importer Affected by VCID-8urm-9ubj-aaac None 36.1.3
2025-06-20T22:24:41.172132+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa None 36.1.3
2025-06-20T22:16:48.181136+00:00 Debian Oval Importer Fixing VCID-pvq7-umur-aaag None 36.1.3
2025-06-20T22:00:41.817138+00:00 Debian Oval Importer Affected by VCID-ftyp-se1c-aaab None 36.1.3
2025-06-08T13:16:44.582170+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T08:12:04.430405+00:00 Debian Oval Importer Fixing VCID-pvq7-umur-aaag https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T07:48:40.615055+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T07:14:42.885008+00:00 Debian Oval Importer Affected by VCID-8urm-9ubj-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T06:28:02.540122+00:00 Debian Oval Importer Affected by VCID-ftyp-se1c-aaab https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T18:29:38.477980+00:00 Debian Oval Importer Affected by VCID-8urm-9ubj-aaac None 36.1.0
2025-06-07T15:48:55.882793+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa None 36.1.0
2025-06-07T15:40:50.235052+00:00 Debian Oval Importer Fixing VCID-pvq7-umur-aaag None 36.1.0
2025-06-07T15:24:16.096703+00:00 Debian Oval Importer Affected by VCID-ftyp-se1c-aaab None 36.1.0
2025-04-12T21:52:54.604856+00:00 Debian Oval Importer Affected by VCID-8urm-9ubj-aaac https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T21:47:12.633945+00:00 Debian Oval Importer Affected by VCID-ftyp-se1c-aaab https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T19:29:57.756407+00:00 Debian Oval Importer Fixing VCID-pvq7-umur-aaag https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T19:04:42.403495+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T06:44:00.929620+00:00 Debian Oval Importer Fixing VCID-pvq7-umur-aaag https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:21:08.049982+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T05:47:16.698585+00:00 Debian Oval Importer Affected by VCID-8urm-9ubj-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T05:00:21.328089+00:00 Debian Oval Importer Affected by VCID-ftyp-se1c-aaab https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T17:07:18.214717+00:00 Debian Oval Importer Affected by VCID-8urm-9ubj-aaac None 36.0.0
2025-04-07T14:19:44.230072+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa None 36.0.0
2025-04-07T14:11:42.752210+00:00 Debian Oval Importer Fixing VCID-pvq7-umur-aaag None 36.0.0
2025-04-07T13:55:34.087550+00:00 Debian Oval Importer Affected by VCID-ftyp-se1c-aaab None 36.0.0
2024-11-28T13:48:23.600817+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-11-27T14:07:25.116688+00:00 Debian Oval Importer Fixing VCID-pvq7-umur-aaag https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 35.0.0
2024-10-14T00:37:00.457728+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-10-13T08:18:24.610262+00:00 Debian Oval Importer Fixing VCID-pvq7-umur-aaag https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.2
2024-09-21T04:23:30.383613+00:00 Debian Oval Importer Affected by VCID-an3m-4v53-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1
2024-09-20T21:38:36.080216+00:00 Debian Oval Importer Fixing VCID-pvq7-umur-aaag https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 34.0.1