[Artful Aardvark] Security issue in the packaged version OCaml

Benjamin benjamin.farinier at gmail.com
Sat Oct 7 15:56:03 UTC 2017


Hello,

I am Ubuntu user working with OCaml. I am glad to see that the Artful
Aardvark release of Ubuntu comes with the 4.04.0 release of the OCaml
compiler. However, it appears that the 4.04.0 (and the 4.04.1) release
contains a security flaw[1].

As this security flaw is fixed in the 4.04.2 release of the compiler,
and as this release of the compiler is fully compatible with 4.04.0,
maybe should it be welcome to upgrade the packaged version of OCaml to
4.04.2?

Best regards,

[1] https://sympa.inria.fr/sympa/arc/caml-list/2017-06/msg00094.html




More information about the Ubuntu-devel-discuss mailing list