Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Date: Wed, 5 Apr 2017 15:05:11 -0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific LinuxFrom: Pat Riehecky Subject: Security ERRATA Moderate: ocaml on SL6.x i386/x86_64 MIME-Version: 1.0 Message-ID: <20170405150511.2526.39295@slpackages.fnal.gov> Synopsis: Moderate: ocaml security update Advisory ID: SLSA-2017:0565-1 Issue Date: 2017-03-21 CVE Numbers: CVE-2015-8869 -- Security Fix(es): * An integer conversion flaw was found in the way OCaml's String handled its length. Certain operations on an excessively long String could trigger a buffer overflow or result in an information leak. (CVE-2015-8869) -- SL6 x86_64 ocaml-3.11.2-5.el6.x86_64.rpm ocaml-camlp4-3.11.2-5.el6.x86_64.rpm ocaml-camlp4-devel-3.11.2-5.el6.x86_64.rpm ocaml-debuginfo-3.11.2-5.el6.x86_64.rpm ocaml-docs-3.11.2-5.el6.x86_64.rpm ocaml-emacs-3.11.2-5.el6.x86_64.rpm ocaml-labltk-3.11.2-5.el6.x86_64.rpm ocaml-labltk-devel-3.11.2-5.el6.x86_64.rpm ocaml-ocamldoc-3.11.2-5.el6.x86_64.rpm ocaml-runtime-3.11.2-5.el6.x86_64.rpm ocaml-source-3.11.2-5.el6.x86_64.rpm ocaml-x11-3.11.2-5.el6.x86_64.rpm i386 ocaml-3.11.2-5.el6.i686.rpm ocaml-camlp4-3.11.2-5.el6.i686.rpm ocaml-camlp4-devel-3.11.2-5.el6.i686.rpm ocaml-debuginfo-3.11.2-5.el6.i686.rpm ocaml-docs-3.11.2-5.el6.i686.rpm ocaml-emacs-3.11.2-5.el6.i686.rpm ocaml-labltk-3.11.2-5.el6.i686.rpm ocaml-labltk-devel-3.11.2-5.el6.i686.rpm ocaml-ocamldoc-3.11.2-5.el6.i686.rpm ocaml-runtime-3.11.2-5.el6.i686.rpm ocaml-source-3.11.2-5.el6.i686.rpm ocaml-x11-3.11.2-5.el6.i686.rpm - Scientific Linux Development Team