RUSTSEC-2023-0004

Working with specific payloads can cause a Denial of Service (DoS) vector.

Both `Decompress` and `Compress` implementations can enter into infinite loops given specific payloads entered that trigger it.

The issue is described in great detail in the [bzip2 repository issue](https://github.com/alexcrichton/bzip2-rs/pull/86).

Thanks to bjrjk for finding and providing the patch for the issue and the maintainer responsibly responding to release a fix quickly.

Users who use the crate with untrusted data should update the `bzip2` to 0.4.4.