Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Fedora 42 Samtools Critical Heap Overflow Denial of Service 2026-1fc0d39acd

fedora
Calendar Grey March 28, 2026
Dist Fedora Esm H88
Fedora 42 samtools updated to 1.23.1 addressing critical heap overflow and denial of service vulnerabilities.
Update to 1.23.1

Summary

SAM (Sequence Alignment/Map) is a flexible generic format for storing

nucleotide sequence alignment.

SAM Tools provide various utilities for manipulating alignments in the

SAM format, including sorting, merging, indexing and generating

alignments in a per-position format.

Update Information:

Update to 1.23.1

Topics%20covered

Topics Covered

security advisory denial of service fedora arbitrary code execution heap overflow htslib

Change Log

* Thu Mar 19 2026 Rasmus Ory Nielsen - 1.23.1-1 - Updated to 1.23.1 * Thu Jan 22 2026 Rasmus Ory Nielsen - 1.23-1 - Updated to 1.23 * Sat Jan 17 2026 Fedora Release Engineering - 1.15.1-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Mon Jan 5 2026 Marcin Juszkiewicz - 1.15.1-8 - Extend check to handle RISC-V 64-bit architecture port. * Fri Jul 25 2025 Fedora Release Engineering - 1.15.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild

References


[ 1 ] Bug #2448750 - CVE-2026-31962 htslib: htslib: Heap buffer overflow leading to arbitrary code execution via crafted CRAM file https://bugzilla.redhat.com/show_bug.cgi?id=2448750 [ 2 ] Bug #2448751 - CVE-2026-31965 htslib: HTSlib: Information disclosure or denial of service via out-of-bounds read in CRAM record processing https://bugzilla.redhat.com/show_bug.cgi?id=2448751 [ 3 ] Bug #2448755 - CVE-2026-31963 htslib: HTSlib: Arbitrary code execution via crafted CRAM file https://bugzilla.redhat.com/show_bug.cgi?id=2448755 [ 4 ] Bug #2448756 - CVE-2026-31964 htslib: HTSlib: Denial of Service via NULL pointer dereference in CRAM decoding https://bugzilla.redhat.com/show_bug.cgi?id=2448756

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1fc0d39acd' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: samtools
Product: Fedora 42
Version: 1.23.1
Release: 1.fc42
URL: http://www.htslib.org/
Summary: Tools for nucleotide sequence alignments in the SAM format

Topics%20covered

Topics Covered

security advisory denial of service fedora arbitrary code execution heap overflow htslib

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here