VYPR

hackage package

bzlib-conduit

pkg:hackage/bzlib-conduit

Vulnerabilities (1)

  • CVE-2019-12900Jun 19, 2019
    affected >= 0.1.0.0, < 0.3.0.3fixed 0.3.0.3

    BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.