On Fri, May 04, 2018 at 09:44:21AM +0200, Emilio Pozuelo Monfort wrote:
> Perhaps given that
> Marshall is clearly marked as unsafe for untrasted data, we should follow
> jessie/stretch and mark this as no-dsa.
Exactly.
Also Ocaml uses static linking so the update would only fix ocaml itself,
but not any of the ocaml-based applications in wheezy.
Cheers,
Moritz