RHSA-2025:0733 — Security Advisory
Red Hat Security Advisory: bzip2 security and bug fix update
Severity
ModerateRed Hat Product Security
Products
Official CSAF product identity
Published · January 28, 2025
Updated · April 28, 2026
Topic
An update for bzip2 is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
The bzip2 packages contain a freely available, high-quality data compressor. It provides both standalone compression and decompression utilities, as well as a shared library for use with other programs.
Security Fix(es):
-
bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail). (CVE-2019-12900)
-
bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail). [rhel-8.10.z] (CVE-2019-12900)
Bug Fix(es):
- Recent bzip2 RHEL8 update breaks data integrity tests (JIRA:RHEL-67824)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.