VYPR

rpm package

opensuse/bzip2&distro=openSUSE Leap 16.0

pkg:rpm/opensuse/bzip2&distro=openSUSE%20Leap%2016.0

Vulnerabilities (1)

  • CVE-2026-42250MedMay 28, 2026
    affected < 1.0.8-160000.3.1fixed 1.0.8-160000.3.1

    bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out‑of‑bounds write to a global buffer, resulting in memory corruption and a crash (denial of service). This issue was fixed in bzip2 patch 35d12