bug#27463: OCaml CVE-2017-9772

2017-06-29 Thread Efraim Flashner
On Fri, Jun 23, 2017 at 12:41:50PM -0400, Leo Famulari wrote: > Our packages of OCaml 4.02.3 and 4.01.0 are vulnerable to CVE-2017-9772: > > http://seclists.org/oss-sec/2017/q2/575 > https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9772 According to Debian¹ only Ocaml-4.04.[01] is affected

bug#27463: OCaml CVE-2017-9772

2017-06-23 Thread Leo Famulari
Our packages of OCaml 4.02.3 and 4.01.0 are vulnerable to CVE-2017-9772: http://seclists.org/oss-sec/2017/q2/575 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9772 signature.asc Description: PGP signature