9935 2016-07-14 08:59:06 +0000 bzip2 v1.0.6 has open CVEs: CVE-2016-3189 2016-08-01 13:02:19 +0000 1 1 7 Build System, Metadata & Runtime OE-Core core unspecified x86 Multiple RESOLVED WONTFIX Medium+ normal 2.2 M2 1 amarnath.valluri alex.kanavin akuster jose.perez.carranza maxin.john meta.mr.watcher meta.watcher patrick.ohly sgw david.israelx.rodriguez.castellanos --- --- No (bug/feature does not impact docs) oldest_to_newest 63966 0 amarnath.valluri 2016-07-14 08:59:06 +0000 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3189 64038 1 alex.kanavin 2016-07-15 13:27:50 +0000 Another low severity issue - this can only cause a crash when rarely used bzip2recover is used with a malicious file. 64725 2 maxin.john 2016-08-01 13:02:19 +0000 Armin's fix is now available in master branch: http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?h=master-next&id=3aaf0232027629b868c85a8f86c2d26e5e9c7ea9