This bug was fixed in the package bzip2 - 1.0.6-8ubuntu0.2 --------------- bzip2 (1.0.6-8ubuntu0.2) xenial-security; urgency=medium
* SECURITY REGRESSION: bzip2 update for CVE-2019-12900 causes some files raises incorrect CRC error. (LP: #1834494) - debian/patches/Accept-as-many-selectors-as-selectors*.patch -- leo.barb...@canonical.com (Leonidas S. Barbosa) Thu, 04 Jul 2019 09:27:38 -0300 ** Changed in: bzip2 (Ubuntu Xenial) Status: New => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-12900 ** Changed in: bzip2 (Ubuntu Disco) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to bzip2 in Ubuntu. https://bugs.launchpad.net/bugs/1834494 Title: latest bzip2 reports crc errors incorrectly Status in bzip2: New Status in bzip2 package in Ubuntu: In Progress Status in bzip2 source package in Xenial: Fix Released Status in bzip2 source package in Bionic: Fix Released Status in bzip2 source package in Cosmic: Fix Released Status in bzip2 source package in Disco: Fix Released Status in bzip2 package in Debian: Confirmed Bug description: I just got the bzip2 1.0.6-8.1ubuntu0.1 updates pushed to my machine and am now having problems with some .tbz2 archives. In particular, I can no longer extract this one: https://developer.nvidia.com/embedded/dlc/l4t-jetson-xavier-driver- package-31-1-0 Downloading this and running: bunzip2 -tvv Jetson_Linux_R31.1.0_aarch64.tbz2 ...yields a CRC error. The previous version of bunzip2 does not report any errors with this archive. To manage notifications about this bug go to: https://bugs.launchpad.net/bzip2/+bug/1834494/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp