Debian/ocaml: critical 9.8
The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0 has an integer overflow which, in situations where marshalled data is accepted from an untrusted source,
Action: Upgrade ocaml to 4.05.0-11 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.05.0-11 | - |
Fixed versions
| 4.05.0-11 |
Sources
published · modified · JSON