GNU bug report logs

#27463 OCaml CVE-2017-9772

PackageSource(s)Maintainer(s)
guix PTS Buildd Popcon
Full log

Message #13 received at 27463@debbugs.gnu.org (full text, mbox, reply):

Received: (at 27463) by debbugs.gnu.org; 14 Nov 2019 16:23:02 +0000
From debbugs-submit-bounces@debbugs.gnu.org Thu Nov 14 11:23:02 2019
Received: from localhost ([127.0.0.1]:35073 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1iVHtc-0004Ow-Ft
	for submit@debbugs.gnu.org; Thu, 14 Nov 2019 11:23:02 -0500
Received: from mail-qt1-f196.google.com ([209.85.160.196]:36862)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <zimon.toutoune@gmail.com>) id 1iVHtZ-0004Oi-Sq
 for 27463@debbugs.gnu.org; Thu, 14 Nov 2019 11:22:58 -0500
Received: by mail-qt1-f196.google.com with SMTP id y10so7420580qto.3
 for <27463@debbugs.gnu.org>; Thu, 14 Nov 2019 08:22:57 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=mime-version:from:date:message-id:subject:to;
 bh=oZsJ+OQAPTEyciSR6IUabJdwJxPU7Vk+rwlnqHFOMXs=;
 b=nOEIhx9IlSgLy+9mCEh5MqUmrHHM5xVMfr1rVlIHVVoRxiox1EuZTJv35gA/hLY01Z
 eatwLrGP9pIHKP28AIj/d0FHWhwk+DOCIDvPf+lS7al1/U1whwZufYfCu5gHIJyYSa+0
 Uo1/Dty/3SbimicmkMNINpaMKGS+LXcfQh0L1INBFnPlLmaI3yEft9xWLCbZ2beE4qJ3
 rQAv4RpaDFIT+z4CDNavFUp2UZwAxmJ6s8Sgjuk49D6I4i5gl+9eW1yqZ8ery4G4j9db
 radmgLlTRDD1WTQiybn6p8/VX+iANI9tCIKtZMpb4I3WAi4sDNrVLInaG+rCxgSxkzy0
 ikOA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
 bh=oZsJ+OQAPTEyciSR6IUabJdwJxPU7Vk+rwlnqHFOMXs=;
 b=S8Z6qIAffM8x+vqXkbdh3WFUhi3fsV8WYqauUBOezaQDUXtqZ6oN9CZLE9zPv+H+lL
 ECKXO6AqM/XII/xvnmvKdwmQUzjd/EWa8rq8Hk3QHhRWpwrrnI1F3yaJjjDeJCsEaNpj
 GOXPOS1ZckB7xl6EITob0fb82KpH87DvJy5CEhWT6ujLiu+0W1BzIH1/eRS+xhPgNu2w
 tqDAGPBoGhW7pcgtyfqOmpzOKPa2lwpZc7ywjd2s0Me3FKVE428xw86oAa/5eH9UUMRN
 BUpBUotLDo8FlCNeX2d0bOaHofn/+APYNCnlN+9/3vZTp+ssNNoF3XDhDYh3cC8OoR/2
 hbAg==
X-Gm-Message-State: APjAAAUoSBOd4qq2bz6w+N86jg87uiLmrizGld+OxjdbugYyy4K8OdTN
 K7undnhj6k2HYyB0PcTSaS79n21Zawkr3PNYA2t8IJa4HR0=
X-Google-Smtp-Source: APXvYqx88jlZQAbN6oaZnRUdqmrvzA8GK1BKTNW33aAVj7qTuQzuFamath8FkLOaRzs2iCc/8ZTr0wg1Qs7gJEuaPNg=
X-Received: by 2002:ac8:7957:: with SMTP id r23mr8605156qtt.211.1573748572151; 
 Thu, 14 Nov 2019 08:22:52 -0800 (PST)
MIME-Version: 1.0
From: zimoun <zimon.toutoune@gmail.com>
Date: Thu, 14 Nov 2019 17:22:41 +0100
Message-ID: <CAJ3okZ13eoBcSC+rPOhMfZ6nCQRbGbSGROjikCUSeSQV-XAKaw@mail.gmail.com>
Subject: Bug #27463 Hunting: OCaml CVE-2017-9772
To: 27463@debbugs.gnu.org, Leo Famulari <leo@famulari.name>, 
 Julien Lepiller <julien@lepiller.eu>,
 Ludovic Courtès <ludo@gnu.org>
Content-Type: text/plain; charset="UTF-8"
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 27463
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.0 (-)
Dear,

This bug was opened for Ocaml version 4.02 and 4.01, then Debian said
it affects version 4.04 and today (two years later) the version is
4.07. Does this security still make sense?

If yes, please indicate me what can I do to proceed: apply the
security patch and close the issue.
If no, I plan to close this bug.


Thank you in advance for any comments.

All the best,
simon

https://debbugs.gnu.org/cgi/bugreport.cgi?bug=27463




Send a report that this bug log contains spam.


debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Dec 22 11:57:53 2024; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.