pysam - a python module for reading, manipulating and writing genomic data
sets.pysam is a lightweight wrapper of the htslib C-API and provides facilities
to read and write SAM/BAM/VCF/BCF/BED/GFF/GTF/FASTA/FASTQ files as well as
access to the command line functionality of the samtools and bcftools packages.
The module supports compression and random access through indexing.
Update Information:
Update pysam Resolves CVE issues
* Sat May 9 2026 David Bold
[ 1 ] Bug #2448875 - CVE-2026-31970 python-pysam: HTSlib: BGZF index file reader has a heap buffer overflow [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2448875
[ 2 ] Bug #2448878 - CVE-2026-31968 python-pysam: HTSlib: Buffer overflow in CRAM decoder [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2448878
[ 3 ] Bug #2448885 - CVE-2026-31966 python-pysam: htslib: Information disclosure and denial of service due to insufficient CRAM feature data validation [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2448885
[ 4 ] Bug #2448887 - CVE-2026-31967 python-pysam: HTSlib: Information disclosure and Denial of Service via unvalidated CRAM mate reference ID [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2448887
[ 5 ] Bug #2448888 - CVE-2026-31971 python-pysam: HTSlib: CRAM decoder vulnerable to buffer overflow [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2448888
[ 6 ] Bug #24488...
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-28858c383e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
Get the latest Linux and open source security news straight to your inbox.