Synopsis:	Important: bzip2 security update
Issue date:	2010-09-20
CVE Names:	CVE-2010-0405

An integer overflow flaw was discovered in the bzip2 decompression 
routine. This issue could, when decompressing malformed archives, cause 
bzip2, or an application linked against the libbz2 library, to crash or, 
potentially, execute arbitrary code. (CVE-2010-0405)

All running applications using the libbz2 library must be restarted for 
the update to take effect.

SL 3.0.x

       SRPMS:
bzip2-1.0.2-14.EL3.src.rpm
       i386:
bzip2-1.0.3-6.el5_5.i386.rpm
bzip2-devel-1.0.3-6.el5_5.i386.rpm
bzip2-libs-1.0.3-6.el5_5.i386.rpm
       x86_64:
bzip2-1.0.3-6.el5_5.x86_64.rpm
bzip2-devel-1.0.3-6.el5_5.i386.rpm
bzip2-devel-1.0.3-6.el5_5.x86_64.rpm
bzip2-libs-1.0.3-6.el5_5.i386.rpm
bzip2-libs-1.0.3-6.el5_5.x86_64.rpm

SL 4.x

       SRPMS:
bzip2-1.0.2-16.el4_8.src.rpm
       i386:
bzip2-1.0.2-16.el4_8.i386.rpm
bzip2-devel-1.0.2-16.el4_8.i386.rpm
bzip2-libs-1.0.2-16.el4_8.i386.rpm
       x86_64:
bzip2-1.0.2-16.el4_8.x86_64.rpm
bzip2-devel-1.0.2-16.el4_8.i386.rpm
bzip2-devel-1.0.2-16.el4_8.x86_64.rpm
bzip2-libs-1.0.2-16.el4_8.i386.rpm
bzip2-libs-1.0.2-16.el4_8.x86_64.rpm

SL 5.x

       SRPMS:
bzip2-1.0.3-6.el5_5.src.rpm
       i386:
bzip2-1.0.2-14.EL3.i386.rpm
bzip2-devel-1.0.2-14.EL3.i386.rpm
bzip2-libs-1.0.2-14.EL3.i386.rpm
       x86_64:
bzip2-1.0.2-14.EL3.x86_64.rpm
bzip2-devel-1.0.2-14.EL3.x86_64.rpm
bzip2-libs-1.0.2-14.EL3.i386.rpm
bzip2-libs-1.0.2-14.EL3.x86_64.rpm

-Connie Sieh
-Troy Dawson