On 08/02/12 18:44, Moritz Muehlenhoff wrote:
Package: ocaml
Severity: important
Tags: security
Ocaml is affected by the recently discovered class of hash collisions,
see http://www.mail-archive.com/[email protected]/msg01477.html
Apparently there's no upstream fix yet.
As far as I understand if, upstream implemented a fix that will be
released in OCaml 3.13. It will be to the programmer to choose a seed
parameter to diversify the hash function.
See http://www.mail-archive.com/[email protected]/msg01500.html in the
same thread.
Regards,
--
Mehdi
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
Archive: http://lists.debian.org/[email protected]
