Posted by Robert Davies on Oct 27 Multiple vulnerabilities, listed below, have been disclosed in the samtools package. These have all been fixed in a new release 1.25 and have also been pack-ported to versions 1.24.1, 1.23.3, 1.22.4 and 1.21.3 We do not yet have CVE numbers for these as our CVE assigning authority, GitHub, has a long backlog. Therefore we are linking to the GitHub pages as these will be updated automatically once the CVEs have been assigned.
Multiple vulnerabilities in samtools
About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/404
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Multiple vulnerabilities in HTSlib
Posted by Robert Davies on Oct 27 Multiple vulnerabilities, listed below, have been disclosed in the HTSlib package. These have all been fixed in a new release 1.25 and…
Unfixed vulnerabilities in Cyrus SASL
Posted by Alan Coopersmith on Oct 09 https://github.com/cyrusimap/cyrus-sasl/issues/891 points out there are a number of publicly reported security issues in the Cyrus…
Vulnerabilities in golang.org/x/net
Posted by Alan Coopersmith on Oct 27 Forwarded Message Subject: [security] Vulnerabilities in golang.org/x/net Date: Tue, 27 Oct 2026 19:53:49 +0000 From: announce ()…
Before you file that AI bug report, OpenAI has some advice
Even OpenAI is admitting there is a lot of AI slop in the security space. An executive for the frontier AI company said Tuesday that AI-generated vulnerability reports…
Godot 3.x/4.x: remote crash via DTLS receive-callback heap buffer overflow
Posted by Tomasz Kaye on Oct 27 A remote denial-of-service vulnerability in Godot's DTLS networking was publicly disclosed on 2026-10-27 [1]. Affected versions: Godot…
Godot 4.x: remote client crash via multiplayer spawn packet sync_len overflow
Posted by Tomasz Kaye on Oct 27 A remote denial-of-service vulnerability in Godot 4.x multiplayer was publicly disclosed on 2026-10-27 [1]. Affected versions: Godot…