USN-4038-4
bzip2 regression
USN-4038-1 fixed a vulnerability in bzip2. The update introduced a regression causing bzip2 to incorrect raises CRC errors for some files. This update provides the corresponding update for Ubuntu 12.04 ESM and 14.04 ESM.
We apologize for the inconvenience.
Original advisory details:
It was discovered that bzip2 incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code.
What each source reports
OSV No score
bzip2 regression
USN-4038-1 fixed a vulnerability in bzip2. The update introduced a regression causing bzip2 to incorrect raises CRC errors for some files. This update provides the corresponding update for Ubuntu 12.04 ESM and 14.04 ESM.
We apologize for the inconvenience.
Original advisory details:
It was discovered that bzip2 incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code.
- Record
USN-4038-4- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bzip2Ubuntu:Pro:14.04:LTS |
before 1.0.6-5ubuntu0.1~esm2, plus listed versions 1.0.6-41.0.6-51.0.6-5ubuntu0.1~esm1 |
1.0.6-5ubuntu0.1~esm2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4038-4 is a vulnerability with no CVSS score yet in bzip2, published July 4, 2019. No source lists public exploit code. Fixed in bzip2 1.0.6-5ubuntu0.1~esm2.