Debian Bwa vulnerabilities

CVE-2019-10269 [CRITICAL] CVE-2019-10269: bwa - BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer over... BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the bns_restore function in bntseq.c via a long sequence name in a .alt file. Scope: local bookworm: resolved (fixed in 0.7.17-3) bullseye: resolved (fixed in 0.7.17-3) forky: resolved (fixed in 0.7.17-3) sid: resolved (fixed in 0.7.17-3) trixie: resolved (fixed in 0.7.17-3)

CVE-2019-11371 [CRITICAL] CVE-2019-11371: bwa - BWA (aka Burrow-Wheeler Aligner) 0.7.17 r1198 has a Buffer Overflow via a long p... BWA (aka Burrow-Wheeler Aligner) 0.7.17 r1198 has a Buffer Overflow via a long prefix that is mishandled in bns_fasta2bntseq and bns_dump at btnseq.c. Scope: local bookworm: open bullseye: open forky: open sid: open trixie: open