Bug#824139: ocaml: CVE-2015-8869

[Salvatore Bonaccorso <carnil@debian.org>]

Hi Moritz,

On Tue, Oct 04, 2016 at 10:27:38PM +0200, Moritz Muehlenhoff wrote:
> B0;115;0cOn Thu, May 12, 2016 at 08:50:57PM +0200, Salvatore Bonaccorso wrote:
> > Source: ocaml
> > Version: 3.12.1-4
> > Severity: important
> > Tags: security upstream patch fixed-upstream
> > Forwarded: http://caml.inria.fr/mantis/view.php?id=7003
> > Control: fixed -1 3.12.1-4+deb7u1
> > 
> > Hi,
> > 
> > the following vulnerability was published for ocaml.
> > 
> > CVE-2015-8869[0]:
> > buffer overflow and information leak
> 
> There have been various uploads since then, has this been fixed?

Just checked the current version in unstable, and it does not look yet
fixed. From the upstream bug report it looks that from upstream point
of view it will be for 4.03.0+dev / +beta1.

Regards,
Salvatore