This adapts an upstream patch from OCaml to fix CVE-2015-8869. I removed the changes to the files 'Changes' and 'VERSION' since they apply to a more recent version of OCaml.
Feedback requested! [0] http://seclists.org/oss-sec/2016/q2/170 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8869 Leo Famulari (1): gnu: ocaml: Fix CVE-2015-8869. gnu/local.mk | 1 + gnu/packages/ocaml.scm | 3 +- gnu/packages/patches/ocaml-CVE-2015-8869.patch | 70 ++++++++++++++++++++++++++ 3 files changed, 73 insertions(+), 1 deletion(-) create mode 100644 gnu/packages/patches/ocaml-CVE-2015-8869.patch -- 2.7.4