Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 507
Alerts This Week
Warning Icon 1 507

Scientific Linux SL6: SLSA-2017:0565-1 Moderate: ocaml Buffer Overflow

Scientific Large Esm H446
Moderate: ocaml security update
Date: Wed, 5 Apr 2017 15:05:11 -0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Moderate: ocaml on SL6.x i386/x86_64
MIME-Version: 1.0
Message-ID: <20170405150511.2526.39295@slpackages.fnal.gov>

Synopsis: Moderate: ocaml security update
Advisory ID: SLSA-2017:0565-1
Issue Date: 2017-03-21
CVE Numbers: CVE-2015-8869
--

Security Fix(es):

* An integer conversion flaw was found in the way OCaml's String handled
its length. Certain operations on an excessively long String could trigger
a buffer overflow or result in an information leak. (CVE-2015-8869)
--

SL6
 x86_64
 ocaml-3.11.2-5.el6.x86_64.rpm
 ocaml-camlp4-3.11.2-5.el6.x86_64.rpm
 ocaml-camlp4-devel-3.11.2-5.el6.x86_64.rpm
 ocaml-debuginfo-3.11.2-5.el6.x86_64.rpm
 ocaml-docs-3.11.2-5.el6.x86_64.rpm
 ocaml-emacs-3.11.2-5.el6.x86_64.rpm
 ocaml-labltk-3.11.2-5.el6.x86_64.rpm
 ocaml-labltk-devel-3.11.2-5.el6.x86_64.rpm
 ocaml-ocamldoc-3.11.2-5.el6.x86_64.rpm
 ocaml-runtime-3.11.2-5.el6.x86_64.rpm
 ocaml-source-3.11.2-5.el6.x86_64.rpm
 ocaml-x11-3.11.2-5.el6.x86_64.rpm
 i386
 ocaml-3.11.2-5.el6.i686.rpm
 ocaml-camlp4-3.11.2-5.el6.i686.rpm
 ocaml-camlp4-devel-3.11.2-5.el6.i686.rpm
 ocaml-debuginfo-3.11.2-5.el6.i686.rpm
 ocaml-docs-3.11.2-5.el6.i686.rpm
 ocaml-emacs-3.11.2-5.el6.i686.rpm
 ocaml-labltk-3.11.2-5.el6.i686.rpm
 ocaml-labltk-devel-3.11.2-5.el6.i686.rpm
 ocaml-ocamldoc-3.11.2-5.el6.i686.rpm
 ocaml-runtime-3.11.2-5.el6.i686.rpm
 ocaml-source-3.11.2-5.el6.i686.rpm
 ocaml-x11-3.11.2-5.el6.i686.rpm

- Scientific Linux Development Team