Cyber ·
Multiple vulnerabilities in samtools fixed in version 1.25
An oss-sec advisory dated October 27, 2026 reports multiple vulnerabilities in the samtools package, fixed in version 1.25 and backported to 1.24.1, 1.23.3, 1.22.4 and 1.21.3. No CVE numbers have been assigned yet.
The advisory reports that multiple vulnerabilities were disclosed in samtools, a tool used to manipulate sequence alignment files in genomics. All were fixed in version 1.25 and also backported to 1.24.1, 1.23.3, 1.22.4 and 1.21.3, for users who cannot upgrade to the main line immediately. According to the maintainers, CVE identifiers are not yet available, because the assigning authority, GitHub, has a large backlog of requests. The advisory therefore lists links to the GitHub pages for each item, which will be updated automatically when CVEs are assigned. The text available in Radar is an automatic translation and the detailed list of vulnerabilities is not fully shown, so this summary does not describe the type, severity or exploitation conditions of each flaw. To verify the content, consult the original on the oss-sec list, the 2026 fourth-quarter archive, item 404, and confirm the affected versions in the samtools project release notes.
Original source: Múltiplas vulnerabilidades no samtools até a versão 1.24