crates.io/bzip2 CVE-2023-22895: unknown, EPSS 1.25%

bzip2 Denial of Service (DoS)

Action: Upgrade bzip2 to 0.4.4 or later.

cargo update -p bzip2 --precise 0.4.4

Affected

Fixed versions

Sources

• osv: RUSTSEC-2023-0004
• https://crates.io/crates/bzip2
• https://rustsec.org/advisories/RUSTSEC-2023-0004.html
• https://github.com/alexcrichton/bzip2-rs/pull/86

CVE-2023-22895 · published 2023-01-09T12:00:00Z · modified 2023-11-08T04:11:39.404864Z · JSON