tocsin

Debian/mpfr4: critical 9.8

Buffer overflow in the mpfr_strtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to incorrect documentation for mpn_set_str.

Action: Upgrade mpfr4 to 3.1.2-2 or later.

Affected

introducedfixedlast affected
03.1.2-2-

Fixed versions

3.1.2-2

Sources

published · modified · JSON