==========================================================================
Ubuntu Security Notice USN-3437-1
October 03, 2017

ocaml vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 14.04 LTS

Summary:

OCaml applications could be made to crash, expose sensitive information, or
run programs.

Software Description:
– ocaml: ML language implementation with a class-based object system

Details:

Radek Micek discovered that OCaml incorrectly handled sign extensions. A
remote attacker could use this issue to cause applications using OCaml to
crash, to possibly obtain sensitive information, or to possibly execute
arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
ocaml 4.01.0-3ubuntu3.1

In general, a standard system update will make all the necessary changes.

References:
https://www.ubuntu.com/usn/usn-3437-1
CVE-2015-8869

Package Information:
https://launchpad.net/ubuntu/+source/ocaml/4.01.0-3ubuntu3.1

—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=67so
—–END PGP SIGNATURE—–
—