Package: mpfr
Severity: important
Tags: security

Hi,

The following CVE (Common Vulnerabilities & Exposures) id was
published for mpfr.

CVE-2009-0757[0]:
| Multiple buffer overflows in GNU MPFR 2.4.0 allow context-dependent
| attackers to cause a denial of service (crash) via the (1)
| mpfr_snprintf and (2) mpfr_vsnprintf functions.

Please coordinate with the security team ([email protected])
to prepare updates for the stable releases.

See also USN-772 [1].

If you fix the vulnerability please also make sure to include the
CVE id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0757
    http://security-tracker.debian.net/tracker/CVE-2009-0757
[1] http://www.ubuntu.com/usn/usn-772-1



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to