| Release | Version |
|---|---|
| jessie | 4.01.0-5 |
| stretch | 4.02.3-9 |
| buster | 4.05.0-11 |
| bullseye | 4.11.1-4 |
| bookworm | 4.13.1-4 |
| trixie | 4.14.1-1 |
| sid | 4.14.1-1 |
| Bug | jessie | stretch | buster | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-9838 | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | fixed | The caml_ba_deserialize function in byterun/bigarray.c in the standard ... |
| CVE-2017-9779 | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | fixed | fixed | OCaml compiler allows attackers to have unspecified impact via unknown ... |
| CVE-2015-8869 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | fixed | fixed | OCaml before 4.03.0 does not properly handle sign extensions, which al ... |
| Bug | Description |
|---|---|
| CVE-2017-9772 | Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4. ... |
| CVE-2012-0839 | OCaml 3.12.1 and earlier computes hash values without restricting the ... |
| DSA / DLA | Description |
|---|---|
| DLA-466-1 | ocaml - security update |