Описание
Security update for libhts
This update of libhts fixes the following security issue:
- CVE-2020-36403: Fixed an out-of-bounds write access in vcf_parse_format() (bsc#1187917)
Список пакетов
SUSE Package Hub 15 SP2
bgzip-1.10.2-bp153.2.5.1
htsfile-1.10.2-bp153.2.5.1
libhts-devel-1.10.2-bp153.2.5.1
libhts-devel-64bit-1.10.2-bp153.2.5.1
libhts3-1.10.2-bp153.2.5.1
libhts3-64bit-1.10.2-bp153.2.5.1
tabix-1.10.2-bp153.2.5.1
SUSE Package Hub 15 SP3
bgzip-1.10.2-bp153.2.5.1
htsfile-1.10.2-bp153.2.5.1
libhts-devel-1.10.2-bp153.2.5.1
libhts-devel-64bit-1.10.2-bp153.2.5.1
libhts3-1.10.2-bp153.2.5.1
libhts3-64bit-1.10.2-bp153.2.5.1
tabix-1.10.2-bp153.2.5.1
openSUSE Leap 15.2
bgzip-1.10.2-bp153.2.5.1
htsfile-1.10.2-bp153.2.5.1
libhts-devel-1.10.2-bp153.2.5.1
libhts-devel-64bit-1.10.2-bp153.2.5.1
libhts3-1.10.2-bp153.2.5.1
libhts3-64bit-1.10.2-bp153.2.5.1
tabix-1.10.2-bp153.2.5.1
openSUSE Leap 15.3
bgzip-1.10.2-bp153.2.5.1
htsfile-1.10.2-bp153.2.5.1
libhts-devel-1.10.2-bp153.2.5.1
libhts-devel-64bit-1.10.2-bp153.2.5.1
libhts3-1.10.2-bp153.2.5.1
libhts3-64bit-1.10.2-bp153.2.5.1
tabix-1.10.2-bp153.2.5.1
Ссылки
- E-Mail link for openSUSE-SU-2021:1177-1
- SUSE Security Ratings
- SUSE Bug 1187917
- SUSE CVE CVE-2020-36403 page
Описание
HTSlib through 1.10.2 allows out-of-bounds write access in vcf_parse_format (called from vcf_parse and vcf_read).
Затронутые продукты
SUSE Package Hub 15 SP2:bgzip-1.10.2-bp153.2.5.1
SUSE Package Hub 15 SP2:htsfile-1.10.2-bp153.2.5.1
SUSE Package Hub 15 SP2:libhts-devel-1.10.2-bp153.2.5.1
SUSE Package Hub 15 SP2:libhts-devel-64bit-1.10.2-bp153.2.5.1
Ссылки
- CVE-2020-36403
- SUSE Bug 1187917