Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-05-28T13:15:19 bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file 5.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H CWE-193

bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out‑of‑bounds write to a global buffer, resulting in memory corruption and a crash (denial of service). This issue was fixed in bzip2 patch 35d122a3df8b0cc4082a4d89fdc6ee99f375fe67

A flaw was found in bzip2. The bzip2recover utility contains an off-by-one error that allows a local attacker to cause an out-of-bounds write to a global buffer by processing a specially crafted file. This memory corruption can lead to a crash, resulting in a Denial of Service (DoS).

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Confidential Compute Attestation Fix deferred openshift-sandboxed-containers/osc-podvm-payload-rhel9 OpenShift Lightspeed Fix deferred openshift-lightspeed/lightspeed-to-dataverse-exporter-rhel9 Pen Drive Powered by Red Hat Lightspeed Fix deferred pen-drive/pen-drive-scanner-rhel9 Pen Drive Powered by Red Hat Lightspeed Fix deferred pen-drive/pen-drive-scanner-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-24/ee-supported-rhel8 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-24/ee-supported-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-24/lightspeed-rhel8 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-25/ee-supported-rhel8 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-25/ee-supported-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-25/lightspeed-chatbot-rhel8 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-25/lightspeed-rhel8 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/controller-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/de-minimal-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/eda-controller-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/ee-minimal-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/ee-supported-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/gateway-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/hub-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/lightspeed-chatbot-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/lightspeed-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/mcp-tools-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-27/ansible-builder-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-27/controller-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-27/de-minimal-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-27/eda-controller-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-27/ee-minimal-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-27/ee-supported-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-27/gateway-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-27/hub-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-27/lightspeed-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-27/mcp-tools-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-27/metrics-service-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform/automation-dashboard-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-tech-preview/metrics-service-rhel9 Red Hat Ansible Automation Platform Ansible Core 2 Fix deferred ansible-automation-platform/ee-minimal-rhel8 Red Hat Ansible Automation Platform Ansible Core 2 Fix deferred ansible-automation-platform/ee-minimal-rhel9 Red Hat Ansible Automation Platform Ansible Core 2 Fix deferred ansible-automation-platform-tech-preview/ee-minimal-rhel8 Red Hat Ansible Automation Platform Ansible Core 2 Fix deferred ansible-automation-platform-tech-preview/ee-minimal-rhel9 Red Hat Discovery 2 Fix deferred discovery/discovery-server-rhel9 Red Hat Enterprise Linux 10 Fix deferred bzip2 Red Hat Enterprise Linux 10 Fix deferred gjs Red Hat Enterprise Linux 10 Fix deferred goose Red Hat Enterprise Linux 10 Fix deferred libkrun Red Hat Enterprise Linux 10 Fix deferred rust-sequoia-sq Red Hat Enterprise Linux 10 Fix deferred trustee Red Hat Enterprise Linux 10 Fix deferred trustee-guest-components Red Hat Enterprise Linux 6 Fix deferred bzip2 Red Hat Enterprise Linux 7 Fix deferred bzip2 Red Hat Enterprise Linux 8 Fix deferred bzip2 Red Hat Enterprise Linux 8 Fix deferred mingw-bzip2 Red Hat Enterprise Linux 8 Fix deferred mozjs60 Red Hat Enterprise Linux 9 Fix deferred bzip2 Red Hat Enterprise Linux 9 Fix deferred goose Red Hat Enterprise Linux 9 Fix deferred trustee-guest-components Red Hat Hardened Images Affected bzip2 Red Hat Hardened Images Affected rust Red Hat Hardened Images Affected rust-podman-sequoia Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-llm-d-inference-scheduler-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-ml-pipelines-runtime-generic-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-model-registry-job-async-upload-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9 Red Hat OpenShift Container Platform 4 Fix deferred kata-containers Red Hat OpenShift Container Platform 4 Fix deferred rhcos Red Hat OpenShift Update Service Fix deferred openshift-update-service/openshift-update-service-rhel8 Red Hat Quay 3 Fix deferred quay/quay-rhel8 Red Hat Quay 3 Fix deferred quay/quay-rhel9 Red Hat Satellite 6 Fix deferred python3.12-maturin Red Hat Satellite 6 Fix deferred python-maturin Red Hat Satellite 6 Fix deferred satellite/iop-advisor-backend-rhel9 Red Hat Satellite 6 Fix deferred satellite/iop-advisor-engine-rhel9 Red Hat Satellite 6 Fix deferred satellite/iop-host-inventory-rhel9 Red Hat Satellite 6 Fix deferred satellite/iop-vmaas-rhel9 Red Hat Satellite 6 Fix deferred satellite/iop-vulnerability-engine-rhel9 Red Hat Trusted Profile Analyzer Fix deferred rhtpa/rhtpa-trustification-service-rhel9 https://www.cve.org/CVERecord?id=CVE-2026-42250 https://nvd.nist.gov/vuln/detail/CVE-2026-42250 https://cert.pl/en/posts/2026/05/CVE-2026-42250/ https://sourceware.org/bzip2/