ELA-132-2 bzip2 regression update

upstream regression

2019-07-18
Packagebzip2
Related CVEs CVE-2019-12900


The original fix for CVE-2019-12900 introduces regressions when extracting certain lbzip2 files which were created with a buggy libzip2: https://bugs.debian.org/931278



For Debian 7 Wheezy, these problems have been fixed in version .

We recommend that you upgrade your bzip2 packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.