ocaml-maint team mailing list archive

Thread
Date

[Bug 1883852] [NEW] Update vulnerable OCaml on 16.04 LTS, 18.04 LTS, 19.10

To: ocaml-maint@xxxxxxxxxxxxxxxxxxx
From: XVilka <1883852@xxxxxxxxxxxxxxxxxx>
Date: Wed, 17 Jun 2020 08:09:59 -0000
Reply-to: Bug 1883852 <1883852@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

Public bug reported:

OCaml prior to 4.05 is vulnerable to:

CVE-2015-8869 2016-06-13T19:59Z 2018-10-30T16:27Z 	
CVE-2017-9772 2017-06-23T20:29Z 2019-10-03T00:03Z 	
CVE-2017-9779 2017-09-07T14:29Z 2019-10-03T00:03Z


OCaml prior to 4.07 is vulnerable to:
CVE-2018-9838 2018-04-06T18:29Z 2018-05-15T18:25Z

** Affects: ocaml (Ubuntu)
     Importance: Undecided
         Status: New

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2015-8869

** Also affects: ocaml (Ubuntu)
   Importance: Undecided
       Status: New

** No longer affects: radare2 (Ubuntu)

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-9772

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-9779

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-9838

-- 
You received this bug notification because you are a member of Debian
OCaml Maintainers, which is subscribed to ocaml in Ubuntu.
https://bugs.launchpad.net/bugs/1883852

Title:
  Update vulnerable OCaml on 16.04 LTS, 18.04 LTS, 19.10

Status in ocaml package in Ubuntu:
  New

Bug description:
  OCaml prior to 4.05 is vulnerable to:

  CVE-2015-8869 2016-06-13T19:59Z 2018-10-30T16:27Z 	
  CVE-2017-9772 2017-06-23T20:29Z 2019-10-03T00:03Z 	
  CVE-2017-9779 2017-09-07T14:29Z 2019-10-03T00:03Z

  
  OCaml prior to 4.07 is vulnerable to:
  CVE-2018-9838 2018-04-06T18:29Z 2018-05-15T18:25Z

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ocaml/+bug/1883852/+subscriptions