UbuntuUpdates.org

Package "opam"

Name: opam

Description:

package manager for OCaml

Latest version: 2.3.0-1+deb13u1build0.25.10.1
Release: questing (25.10)
Level: security
Repository: universe
Homepage: https://opam.ocaml.org

Links


Download "opam"


Other versions of "opam" in Questing

Repository Area Version
base universe 2.3.0-1
updates universe 2.3.0-1+deb13u1build0.25.10.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.3.0-1+deb13u1build0.25.10.1 2026-05-07 17:07:53 UTC

  opam (2.3.0-1+deb13u1build0.25.10.1) questing-security; urgency=medium

  * fake sync from Debian
    - Fixes CVE-2026-41082

 -- Hlib Korzhynskyy <email address hidden> Wed, 06 May 2026 17:33:58 -0230

CVE-2026-41082 In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.



About   -   Send Feedback to @ubuntu_updates