Ubuntu alert USN-8685-1 (bzip2)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8685-1] bzip2 vulnerability
Date:
             
 
Mon, 31 Aug 2026 10:03:31 +0000
Message-ID:
             
 
<E1x0yrT-0000Hx-NS@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8685-1
August 27, 2026

bzip2 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

bzip2 could be made to crash if it processed a specially crafted archive.

Software Description:
- bzip2: high-quality block-sorting file compressor

Details:

It was discovered that bzip2 did not properly manage memory under certain
circumstances. An attacker could possibly use this issue to cause a crash,
resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  bzip2                           1.0.8-6ubuntu0.1

Ubuntu 24.04 LTS
  bzip2                           1.0.8-5.1ubuntu0.1

Ubuntu 22.04 LTS
  bzip2                           1.0.8-5ubuntu0.1

Ubuntu 20.04 LTS
  bzip2                           1.0.8-2ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  bzip2                           1.0.6-8.1ubuntu0.2+esm1
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  bzip2                           1.0.6-8ubuntu0.2+esm1
                                  Available with Ubuntu Pro

Ubuntu 14.04 LTS
  bzip2                           1.0.6-5ubuntu0.1~esm3
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8685-1
  CVE-2026-42250

Package Information:
  https://launchpad.net/ubuntu/+source/bzip2/1.0.8-6ubuntu0.1
  https://launchpad.net/ubuntu/+source/bzip2/1.0.8-5.1ubunt...
  https://launchpad.net/ubuntu/+source/bzip2/1.0.8-5ubuntu0.1


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=gimy
-----END PGP SIGNATURE-----