Overflow bug in bzip2

[Morten Gulbrandsen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

David Shaw wrote:
> Hi folks,
> 
> This isn't a GnuPG bug per se, but given that many (most?) people using GnuPG have it linked against libbz2, please read http://www.ubuntu.com/usn/usn-986-1 and upgrade appropriately for your platform.
> 
> To tell if your installation of GnuPG is using libbz2, run "gpg2 --version" (or "gpg --version").  If you see "BZIP2" on the "Compression" line, then you are linked with libbz2.
> 
> David
> 


Hi list readers:
Hi David:

My problem is:

gpg: uncompressing failed: unknown compress algorithm

https://www.blastwave.org/forum/viewtopic.php?f=5&t=755

personal-compress-preferences BZIP2 ZLIB ZIP Uncompressed

the last line from my gpg.conf triggers the error

The issue is on latest opensolaris, I again checked the bzip2 issue, and
I have the latest version, still bzip2  will since recently not work on
my machine.  Maybe I need to recompile both bzip2 and gnupg from
scratch? Is the bzip2 vulnerability fixed?


Sincerely yours,

藻留天  具留部覧度船
Morten Gulbrandsen
_____________________________________________________________________
Java programmer, C++ programmer
CAcert Assurer, GSWoT introducer, thawte Notary
Gossamer Spider Web of Trust http://www.gswot.org
Please consider the environment before printing this e-mail!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: For keyID and its URL see the OpenPGP message header

iEYEAREKAAYFAkzXNAsACgkQ9ymv2YGAKVRv9wCcC2Jkt+X7TlP9p1kz3lpUk2BK
js0AoJ4lN22YuAAsTODHtbQJVkhfvcYv
=lrVF
-----END PGP SIGNATURE-----