ELSA-2025-9332

ELSA-2025-9332 - mpfr security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-07-08

Description

[3.1.1-4.0.1]
- Fixes buffer overflow in mpfr_strtofr (CVE-2014-9474) [Orabug: 38103811]

Related CVEs

CVE-2014-9474

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	mpfr-3.1.1-4.0.1.el7.src.rpm	2069347d68caf984536195c72647b3b4810c019944ab5ba301a8a5bfed477bcf	-	ol7_x86_64_latest_ELS
	mpfr-3.1.1-4.0.1.el7.i686.rpm	045f34f902deeb3e903721bcfe6835e9183f79e2046c076d2f3f2fa95f4e9bbe	-	ol7_x86_64_latest_ELS
	mpfr-3.1.1-4.0.1.el7.x86_64.rpm	5776fe533242409c7ddedbfe7e145dee09869d4514713528e80286cba7cdf341	-	ol7_x86_64_latest_ELS
	mpfr-devel-3.1.1-4.0.1.el7.i686.rpm	c827c4401e0eb72aa6be3619b1fa1bc170771cc90a27a09db0322d5f76e33692	-	ol7_x86_64_latest_ELS
	mpfr-devel-3.1.1-4.0.1.el7.x86_64.rpm	3efbf06ababd335e80dd5b8e584c22af7199e9b0c50147a8bcd0a7607441d644	-	ol7_x86_64_latest_ELS

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team