[Git][security-tracker-team/security-tracker][master] Update information for CVE-2023-45322

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d7ddf065 by Salvatore Bonaccorso at 2024-10-26T20:11:13+02:00
Update information for CVE-2023-45322

Record original attempt, note on regression but in particular the fix
from 2.12.2; so the BTS record is still correct with respect of our
tracking. Just for backporting it is important to pick the correct
change upstream.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -96428,6 +96428,10 @@ CVE-2023-45322 (libxml2 through 2.11.5 has a use-after-free that can only occur
 	[bullseye] - libxml2 <no-dsa> (Minor issue)
 	[buster] - libxml2 <postponed> (Minor issue, very hard/unlikely to trigger)
 	NOTE: https://gitlab.gnome.org/GNOME/libxml2/-/issues/583
+	NOTE: Originally fixed by: https://gitlab.gnome.org/GNOME/libxml2/-/commit/d39f78069dff496ec865c73aa44d7110e429bce9 (v2.12.0)
+	NOTE: Introduced regression (and thus commit reverted temporarily upstream):
+	NOTE: https://gitlab.gnome.org/GNOME/libxml2/-/issues/634
+	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/libxml2/-/commit/30d7660ba87c8487b26582ccc050f4d2880ccb3c (v2.12.2)
 	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/libxml2/-/commit/8707838e69f9c6e729c1d1d46bb3681d9e622be5 (v2.13.0)
 	NOTE: https://gitlab.gnome.org/GNOME/libxml2/-/issues/344
 	NOTE: http://www.openwall.com/lists/oss-security/2023/10/06/5



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7ddf0655d8683e1df10dbf944443181d62fe83a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d7ddf0655d8683e1df10dbf944443181d62fe83a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241026/2391c844/attachment-0001.htm>