Cyber ·
HTSlib: multiple vulnerabilities fixed in version 1.25
Disclosure on the oss-sec list of multiple vulnerabilities in the HTSlib package, fixed in version 1.25 and backported to 1.24.1, 1.23.3, 1.22.4 and 1.21.3. As of the October 27 notice, no CVE numbers had been assigned.
On October 27, Robert Davies posted to the oss-sec list that multiple vulnerabilities in the HTSlib package had been disclosed. All were fixed in version 1.25 and also backported to versions 1.24.1, 1.23.3, 1.22.4 and 1.21.3, for users who cannot yet move to the main line.
The notice states that no CVE numbers exist yet. According to the text, assignment is delayed by a backlog of requests at the responsible authority. For that reason the post includes references to GitHub pages, which will be updated automatically once CVEs are assigned. The received content is truncated before the detailed list of each flaw, so this summary does not describe the specific vulnerability types.
To consult and verify, read the original text on the oss-sec list and confirm the HTSlib version installed in your environment. Also check the project's official release notes and the CVE numbers once they are published.
Original source: Múltiplas vulnerabilidades no HTSlib até a versão 1.24