CVE catalog

CVE-2026-42250

bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out‑of‑bounds write to a global buffer, resulting in memory corrup

[CVE catalog]

Severity
Medium · CVSS 5CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.13% · Oct 25, 2026

bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out‑of‑bounds write to a global buffer, resulting in memory corruption and a crash (denial of service). This issue was fixed in bzip2 patch 35d122a3df8b0cc4082a4d89fdc6ee99f375fe67

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianbzip2sid1.0.8-6vulnerable
Debianbzip2forky1.0.8-6vulnerable
Debianbzip2trixie1.0.8-6vulnerable
Debianbzip2bookworm1.0.8-5vulnerable
Cpebzip2Not reportedNot reportedvulnerable
Ubuntubzip2noble1.0.8-5.1ubuntu0.1fixed
Ubuntubzip2-docnoble1.0.8-5.1ubuntu0.1fixed
Ubuntulibbz2-1.0noble1.0.8-5.1ubuntu0.1fixed
Ubuntulibbz2-devnoble1.0.8-5.1ubuntu0.1fixed
Susebzip2linux enterprise server 16.01.0.8-160000.3.1fixed
Susebzip2linux enterprise server for sap applications 16.01.0.8-160000.3.1fixed
Susebzip2linux micro 6.21.0.8-160000.3.1fixed
Susebzip2linux micro 6.01.0.8-4.1fixed
Susebzip2linux micro 6.11.0.8-slfo.1.1_2.1fixed
Susebzip2linux enterprise micro 5.31.0.8-150400.3.4.1fixed
Susebzip2linux enterprise micro 5.41.0.8-150400.3.4.1fixed
Susebzip2linux enterprise micro 5.51.0.8-150400.3.4.1fixed
Susebzip2linux enterprise module for basesystem 15 sp71.0.8-150400.3.4.1fixed
Susebzip2linux enterprise server ltss extended security 12 sp51.0.6-30.17.1fixed
Opensusebzip2leap 16.01.0.8-160000.3.1fixed
Ubuntubzip2pro1.0.6-9.2vulnerable
Ubuntubzip2pro1.0.8-2vulnerable
Ubuntubzip2pro1.0.8-2ubuntu0.1~esm1fixed
Ubuntubzip222.041.0.8-4ubuntu3vulnerable
Ubuntubzip222.041.0.8-4ubuntu4vulnerable
Ubuntubzip222.041.0.8-5vulnerable
Ubuntubzip222.041.0.8-5build1vulnerable
Ubuntubzip222.041.0.8-5ubuntu0.1fixed
Ubuntubzip224.041.0.8-5build1vulnerable
Ubuntubzip224.041.0.8-5ubuntu1vulnerable
Ubuntubzip224.041.0.8-5.1vulnerable
Ubuntubzip224.041.0.8-5.1build0.1vulnerable
Ubuntubzip224.041.0.8-5.1ubuntu0.1fixed
Ubuntubzip226.041.0.8-6build1vulnerable
Ubuntubzip226.041.0.8-6build2vulnerable
Ubuntubzip226.041.0.8-6ubuntu0.1fixed
Opensusebzip2tumbleweed1.0.8-6.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianbzip2sourcesid(unfixed)not yet assignedNot reported[1138255]
Debianbzip2sourceforky(unfixed)not yet assignedNot reported[1138255]
Debianbzip2sourcetrixie(unfixed)not yet assignedNot reported[1138255]
Debianbzip2sourcebookworm(unfixed)not yet assignedNot reported[1138255]
Ubuntubzip2debnoble1.0.8-5.1ubuntu0.1Not reportedNot reportedNot reported
Ubuntubzip2-docdebnoble1.0.8-5.1ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibbz2-1.0debnoble1.0.8-5.1ubuntu0.1Not reportedNot reportedNot reported
Ubuntulibbz2-devdebnoble1.0.8-5.1ubuntu0.1Not reportedNot reportedNot reported
Susebzip2rpmlinux enterprise server 16.01.0.8-160000.3.1Not reportedSUSE-SU-2026:23627-1Not reported
Susebzip2rpmlinux enterprise server for sap applications 16.01.0.8-160000.3.1Not reportedSUSE-SU-2026:23627-1Not reported
Susebzip2rpmlinux micro 6.21.0.8-160000.3.1Not reportedSUSE-SU-2026:23494-1Not reported
Susebzip2rpmlinux micro 6.01.0.8-4.1Not reportedSUSE-SU-2026:23442-1Not reported
Susebzip2rpmlinux micro 6.11.0.8-slfo.1.1_2.1Not reportedSUSE-SU-2026:23415-1Not reported
Susebzip2rpmlinux enterprise micro 5.31.0.8-150400.3.4.1Not reportedSUSE-SU-2026:4055-1Not reported
Susebzip2rpmlinux enterprise micro 5.41.0.8-150400.3.4.1Not reportedSUSE-SU-2026:4055-1Not reported
Susebzip2rpmlinux enterprise micro 5.51.0.8-150400.3.4.1Not reportedSUSE-SU-2026:4055-1Not reported
Susebzip2rpmlinux enterprise module for basesystem 15 sp71.0.8-150400.3.4.1Not reportedSUSE-SU-2026:4055-1Not reported
Susebzip2rpmlinux enterprise server ltss extended security 12 sp51.0.6-30.17.1Not reportedSUSE-SU-2026:3925-1Not reported
Opensusebzip2rpmleap 16.01.0.8-160000.3.1Not reportedOPENSUSE-SU-2026:21762-1Not reported
Ubuntubzip2debpro1.0.8-2ubuntu0.1~esm1Not reportedUSN-8685-1Not reported
Ubuntubzip2deb22.041.0.8-5ubuntu0.1Not reportedUSN-8685-1Not reported
Ubuntubzip2deb24.041.0.8-5.1ubuntu0.1Not reportedUSN-8685-1Not reported
Ubuntubzip2deb26.041.0.8-6ubuntu0.1Not reportedUSN-8685-1Not reported
Opensusebzip2rpmtumbleweed1.0.8-6.1Not reportedOPENSUSE-SU-2026:11627-1Not reported

[Debian bug #1138255]

Notes

[trixie] bzip2: Minor issue [bookworm] bzip2: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [bzip2]Affected

    Source package: [bzip2]

    Details (2)

    • 1.0.8-5+b1 · amd64 · bookworm

      Affected

      nvd · bzip2 · debian · bookworm; nvd · bzip2 · debian · 12

    • 1.0.8-5+b1 · arm64 · bookworm

      Affected

      nvd · bzip2 · debian · bookworm; nvd · bzip2 · debian · 12

  • [bzip2-doc]Affected

    Source package: [bzip2]

    Details (2)

    • 1.0.8-5 · all · bookworm

      Affected

      nvd · bzip2 · debian · bookworm; nvd · bzip2 · debian · 12

    • 1.0.8-5 · all · bookworm

      Affected

      nvd · bzip2 · debian · bookworm; nvd · bzip2 · debian · 12

  • [libbz2-1.0]Affected

    Source package: [bzip2]

    Details (2)

    • 1.0.8-5+b1 · amd64 · bookworm

      Affected

      nvd · bzip2 · debian · bookworm; nvd · bzip2 · debian · 12

    • 1.0.8-5+b1 · arm64 · bookworm

      Affected

      nvd · bzip2 · debian · bookworm; nvd · bzip2 · debian · 12

  • [libbz2-dev]Affected

    Source package: [bzip2]

    Details (2)

    • 1.0.8-5+b1 · amd64 · bookworm

      Affected

      nvd · bzip2 · debian · bookworm; nvd · bzip2 · debian · 12

    • 1.0.8-5+b1 · arm64 · bookworm

      Affected

      nvd · bzip2 · debian · bookworm; nvd · bzip2 · debian · 12

[Debian 13 (Trixie)]

  • [bzip2]Affected
    Details (2)

    • 1.0.8-6 · amd64 · trixie

      Affected

      nvd · bzip2 · debian · 13

    • 1.0.8-6 · arm64 · trixie

      Affected

      nvd · bzip2 · debian · 13

  • [bzip2-doc]Affected

    Source package: [bzip2]

    Details (2)

    • 1.0.8-6 · all · trixie

      Affected

      nvd · bzip2 · debian · 13

    • 1.0.8-6 · all · trixie

      Affected

      nvd · bzip2 · debian · 13

  • [libbz2-1.0]Affected

    Source package: [bzip2]

    Details (2)

    • 1.0.8-6 · amd64 · trixie

      Affected

      nvd · bzip2 · debian · 13

    • 1.0.8-6 · arm64 · trixie

      Affected

      nvd · bzip2 · debian · 13

  • [libbz2-dev]Affected

    Source package: [bzip2]

    Details (2)

    • 1.0.8-6 · amd64 · trixie

      Affected

      nvd · bzip2 · debian · 13

    • 1.0.8-6 · arm64 · trixie

      Affected

      nvd · bzip2 · debian · 13

[openSUSE Tumbleweed]

  • [bzip2-doc]Unknown

    Source package: [bzip2]

    Details (1)

    • 1.0.8-6.1 · noarch · tumbleweed

      Unknown · Fixed: 1.0.8-6.1

      Version impact unknown

      nvd · bzip2 · opensuse · tumbleweed

  • [libbz2-1]Unknown

    Source package: [bzip2]

    Details (1)

    • 1.0.8-6.1 · x86_64 · tumbleweed

      Unknown · Fixed: 1.0.8-6.1

      Version impact unknown

      nvd · bzip2 · opensuse · tumbleweed

  • [libbz2-1-32bit]Unknown

    Source package: [bzip2]

    Details (1)

    • 1.0.8-6.1 · x86_64 · tumbleweed

      Unknown · Fixed: 1.0.8-6.1

      Version impact unknown

      nvd · bzip2 · opensuse · tumbleweed

  • [libbz2-1-x86-64-v3]Unknown

    Source package: [bzip2]

    Details (1)

    • 1.0.8-6.1 · x86_64 · tumbleweed

      Unknown · Fixed: 1.0.8-6.1

      Version impact unknown

      nvd · bzip2 · opensuse · tumbleweed

  • [libbz2-devel]Unknown

    Source package: [bzip2]

    Details (1)

    • 1.0.8-6.1 · x86_64 · tumbleweed

      Unknown · Fixed: 1.0.8-6.1

      Version impact unknown

      nvd · bzip2 · opensuse · tumbleweed

  • [libbz2-devel-32bit]Unknown

    Source package: [bzip2]

    Details (1)

    • 1.0.8-6.1 · x86_64 · tumbleweed

      Unknown · Fixed: 1.0.8-6.1

      Version impact unknown

      nvd · bzip2 · opensuse · tumbleweed

  • [bzip2]Fixed

    Source package: [bzip2]

    Details (1)

    • 1.0.8-6.1 · x86_64 · tumbleweed

      Fixed · Fixed: 1.0.8-6.1

      nvd · bzip2 · opensuse · tumbleweed

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]