Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:2192-1

Опубликовано: 30 авг. 2016
Источник: suse-cvrf

Описание

Security update for ocaml

This update for ocaml fixes the following issue:

Security issue fixed:

  • CVE-2015-8869: Prevent buffer overflow and information leak. (bsc#977990)

Список пакетов

SUSE Linux Enterprise Software Development Kit 11 SP4
ocaml-4.02.1-3.4
ocaml-compiler-libs-4.02.1-3.4
ocaml-runtime-4.02.1-3.4

Ссылки

Описание

OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function.

Затронутые продукты
SUSE Linux Enterprise Software Development Kit 11 SP4:ocaml-4.02.1-3.4
SUSE Linux Enterprise Software Development Kit 11 SP4:ocaml-compiler-libs-4.02.1-3.4
SUSE Linux Enterprise Software Development Kit 11 SP4:ocaml-runtime-4.02.1-3.4
Ссылки