[Git][security-tracker-team/security-tracker][master] Reference upstream fixes for CVE-2023-37365/hnswlib

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7c36e028 by Salvatore Bonaccorso at 2026-03-22T08:39:37+01:00
Reference upstream fixes for CVE-2023-37365/hnswlib

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -289291,6 +289291,8 @@ CVE-2023-37365 (Hnswlib 0.7.0 has a double free in init_index when the M argumen
 	[bookworm] - hnswlib 0.6.2-2+deb12u1
 	[bullseye] - hnswlib 0.4.0-3+deb11u1
 	NOTE: https://github.com/nmslib/hnswlib/issues/467
+	NOTE: https://github.com/nmslib/hnswlib/pull/484
+	NOTE: Fixed by: https://github.com/nmslib/hnswlib/commit/5aba6c6bb1df771fd1d641db5886b7efd2096ee3 (v0.8.0)
 CVE-2023-37360 (pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injec ...)
 	- pacparser 1.4.3-1 (bug #1041425)
 	[bookworm] - pacparser <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7c36e0283d4f52abedf09bb1b2e64ddae5f981bc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7c36e0283d4f52abedf09bb1b2e64ddae5f981bc
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260322/f1b0ba24/attachment.htm>