========================================================================== Ubuntu Security Notice USN-3437-1 October 03, 2017
ocaml vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 LTS Summary: OCaml applications could be made to crash, expose sensitive information, or run programs. Software Description: - ocaml: ML language implementation with a class-based object system Details: Radek Micek discovered that OCaml incorrectly handled sign extensions. A remote attacker could use this issue to cause applications using OCaml to crash, to possibly obtain sensitive information, or to possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS: ocaml 4.01.0-3ubuntu3.1 In general, a standard system update will make all the necessary changes. References: https://www.ubuntu.com/usn/usn-3437-1 CVE-2015-8869 Package Information: https://launchpad.net/ubuntu/+source/ocaml/4.01.0-3ubuntu3.1
signature.asc
Description: OpenPGP digital signature
-- ubuntu-security-announce mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
