bin/81432: bzip2 old version DoS

[Dmitry Provodnikov]

>Number:         81432
>Category:       bin
>Synopsis:       bzip2 old version DoS
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Tue May 24 08:40:02 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     Dmitry Provodnikov
>Release:        4.11
>Organization:
pvt person
>Environment:
FreeBSD nskix 4.11-RELEASE-p9 FreeBSD 4.11-RELEASE-p9 #19: Fri May 13 20
:49:52 NOVST 2005 root at nskix:/1/usr/obj/usr/src/sys/MYKERN1  i386
>Description:
there is a DoS possibility in bzip2 all versions prior to 1.0.3

>How-To-Repeat:
try to unpack
http://scary.beasts.org/misc/bomb.bz2

>Fix:
update of source codes in /usr/src/usr.bin/*bzip2*
according to bzip2 version 1.0.3

>Release-Note:
>Audit-Trail:
>Unformatted: