Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:1177-1

Опубликовано: 22 авг. 2021
Источник: suse-cvrf

Описание

Security update for libhts

This update of libhts fixes the following security issue:

  • CVE-2020-36403: Fixed an out-of-bounds write access in vcf_parse_format() (bsc#1187917)

Список пакетов

SUSE Package Hub 15 SP2
bgzip-1.10.2-bp153.2.5.1
htsfile-1.10.2-bp153.2.5.1
libhts-devel-1.10.2-bp153.2.5.1
libhts-devel-64bit-1.10.2-bp153.2.5.1
libhts3-1.10.2-bp153.2.5.1
libhts3-64bit-1.10.2-bp153.2.5.1
tabix-1.10.2-bp153.2.5.1
SUSE Package Hub 15 SP3
bgzip-1.10.2-bp153.2.5.1
htsfile-1.10.2-bp153.2.5.1
libhts-devel-1.10.2-bp153.2.5.1
libhts-devel-64bit-1.10.2-bp153.2.5.1
libhts3-1.10.2-bp153.2.5.1
libhts3-64bit-1.10.2-bp153.2.5.1
tabix-1.10.2-bp153.2.5.1
openSUSE Leap 15.2
bgzip-1.10.2-bp153.2.5.1
htsfile-1.10.2-bp153.2.5.1
libhts-devel-1.10.2-bp153.2.5.1
libhts-devel-64bit-1.10.2-bp153.2.5.1
libhts3-1.10.2-bp153.2.5.1
libhts3-64bit-1.10.2-bp153.2.5.1
tabix-1.10.2-bp153.2.5.1
openSUSE Leap 15.3
bgzip-1.10.2-bp153.2.5.1
htsfile-1.10.2-bp153.2.5.1
libhts-devel-1.10.2-bp153.2.5.1
libhts-devel-64bit-1.10.2-bp153.2.5.1
libhts3-1.10.2-bp153.2.5.1
libhts3-64bit-1.10.2-bp153.2.5.1
tabix-1.10.2-bp153.2.5.1

Описание

HTSlib through 1.10.2 allows out-of-bounds write access in vcf_parse_format (called from vcf_parse and vcf_read).


Затронутые продукты
SUSE Package Hub 15 SP2:bgzip-1.10.2-bp153.2.5.1
SUSE Package Hub 15 SP2:htsfile-1.10.2-bp153.2.5.1
SUSE Package Hub 15 SP2:libhts-devel-1.10.2-bp153.2.5.1
SUSE Package Hub 15 SP2:libhts-devel-64bit-1.10.2-bp153.2.5.1

Ссылки