bin/81432: bzip2 old version DoS

Dmitry Provodnikov provodnikov at
Tue May 24 08:40:03 GMT 2005

>Number:         81432
>Category:       bin
>Synopsis:       bzip2 old version DoS
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Tue May 24 08:40:02 GMT 2005
>Originator:     Dmitry Provodnikov
>Release:        4.11
pvt person
FreeBSD nskix 4.11-RELEASE-p9 FreeBSD 4.11-RELEASE-p9 #19: Fri May 13 20
:49:52 NOVST 2005 root at nskix:/1/usr/obj/usr/src/sys/MYKERN1  i386
there is a DoS possibility in bzip2 all versions prior to 1.0.3

try to unpack

update of source codes in /usr/src/usr.bin/*bzip2*
according to bzip2 version 1.0.3


More information about the freebsd-bugs mailing list