On Fri, May 04, 2018 at 09:44:21AM +0200, Emilio Pozuelo Monfort wrote: > Perhaps given that > Marshall is clearly marked as unsafe for untrasted data, we should follow > jessie/stretch and mark this as no-dsa.
Exactly. Also Ocaml uses static linking so the update would only fix ocaml itself, but not any of the ocaml-based applications in wheezy. Cheers, Moritz