[Debian-med-packaging] Bug#1041426: hnswlib: CVE-2023-37365

[Moritz Mühlenhoff]

Source: hnswlib
X-Debbugs-CC: team at security.debian.org
Severity: important
Tags: security

Hi,

The following vulnerability was published for hnswlib.

CVE-2023-37365[0]:
| Hnswlib 0.7.0 has a double free in init_index when the M argument is
| a large integer.

https://github.com/nmslib/hnswlib/issues/467
 

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2023-37365
    https://www.cve.org/CVERecord?id=CVE-2023-37365

Please adjust the affected versions in the BTS as needed.