HTSlib through 1.24 fixed in 1.25 and backports
Original title: Multiple vulnerabilities in HTSlib <= 1.24
The same release set back-ports fixes to 1.24.1, 1.23.3, 1.22.4 and 1.21.3 while CVE IDs remain pending.
Robert Davies disclosed multiple vulnerabilities in HTSlib through version 1.24 on oss-security on October 27. They are fixed in new release 1.25 and back-ported to 1.24.1, 1.23.3, 1.22.4 and 1.21.3. CVE numbers are not yet available because GitHub’s assignment backlog is long; linked GitHub pages are expected to update once IDs exist. The available snippet does not describe each flaw.
Unconfirmed: Individual bug details, severity and exploitation status are not in the snippet.
- Posted by Robert Davies on October 27.
- Affected range stated as HTSlib <= 1.24.
- Fixed in 1.25, 1.24.1, 1.23.3, 1.22.4 and 1.21.3.
- GitHub is the CVE authority and has not assigned numbers yet.
Impact: Multiple unspecified flaws in HTSlib
| Product | Affected | Fixed in |
|---|---|---|
| HTSlib | <= 1.24 | 1.25, 1.24.1, 1.23.3, 1.22.4, 1.21.3 |
- 1.Upgrade HTSlib to 1.25 or the listed back-ports 1.24.1, 1.23.3, 1.22.4 or 1.21.3.
From the original article
Posted by Robert Davies on Oct 27 Multiple vulnerabilities, listed below, have been disclosed in the HTSlib package. These have all been fixed in a new release 1. 25 and have also been pack-ported to versions 1.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.