Overflow bug in bzip2

Morten Gulbrandsen classpath at arcor.de
Mon Nov 8 00:19:40 CET 2010

Hash: SHA512

David Shaw wrote:
> Hi folks,
> This isn't a GnuPG bug per se, but given that many (most?) people using GnuPG have it linked against libbz2, please read http://www.ubuntu.com/usn/usn-986-1 and upgrade appropriately for your platform.
> To tell if your installation of GnuPG is using libbz2, run "gpg2 --version" (or "gpg --version").  If you see "BZIP2" on the "Compression" line, then you are linked with libbz2.
> David

Hi list readers:
Hi David:

My problem is:

gpg: uncompressing failed: unknown compress algorithm


personal-compress-preferences BZIP2 ZLIB ZIP Uncompressed

the last line from my gpg.conf triggers the error

The issue is on latest opensolaris, I again checked the bzip2 issue, and
I have the latest version, still bzip2  will since recently not work on
my machine.  Maybe I need to recompile both bzip2 and gnupg from
scratch? Is the bzip2 vulnerability fixed?

Sincerely yours,

藻留天  具留部覧度船
Morten Gulbrandsen
Java programmer, C++ programmer
CAcert Assurer, GSWoT introducer, thawte Notary
Gossamer Spider Web of Trust http://www.gswot.org
Please consider the environment before printing this e-mail!
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: For keyID and its URL see the OpenPGP message header


More information about the Gnupg-users mailing list