Skip to content
OpenAdvisories
Medium ELSA-2016-1296 1 CVE

Moderate: ocaml security update (Oracle Linux 7)

Published Jun 23, 2016 · Updated Jun 23, 2016

Ecosystem: Oracle Linux

Summary

[4.01.0-22.7]
- Fix buffer overflow and information leak CVE-2015-8869
resolves: rhbz#1343100

Fixed packages 12

ReleasePackageFixed in
Oracle Linux · 7 ocaml 0:4.01.0-22.7.el7_2
Oracle Linux · 7 ocaml-camlp4 0:4.01.0-22.7.el7_2
Oracle Linux · 7 ocaml-camlp4-devel 0:4.01.0-22.7.el7_2
Oracle Linux · 7 ocaml-compiler-libs 0:4.01.0-22.7.el7_2
Oracle Linux · 7 ocaml-docs 0:4.01.0-22.7.el7_2
Oracle Linux · 7 ocaml-emacs 0:4.01.0-22.7.el7_2
Oracle Linux · 7 ocaml-labltk 0:4.01.0-22.7.el7_2
Oracle Linux · 7 ocaml-labltk-devel 0:4.01.0-22.7.el7_2
Oracle Linux · 7 ocaml-ocamldoc 0:4.01.0-22.7.el7_2
Oracle Linux · 7 ocaml-runtime 0:4.01.0-22.7.el7_2
Oracle Linux · 7 ocaml-source 0:4.01.0-22.7.el7_2
Oracle Linux · 7 ocaml-x11 0:4.01.0-22.7.el7_2

Vulnerabilities 1

  • Unscored —
    CVE-2015-8869

    OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow …

    ocaml ocaml Debian Ubuntu