UbuntuUpdates.org

Package "opam"

Name: opam

Description:

package manager for OCaml

Latest version: 2.1.2-1+deb12u1build0.22.04.1
Release: jammy (22.04)
Level: security
Repository: universe
Homepage: https://opam.ocaml.org

Links


Download "opam"


Other versions of "opam" in Jammy

Repository Area Version
base universe 2.1.2-1
updates universe 2.1.2-1+deb12u1build0.22.04.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.1.2-1+deb12u1build0.22.04.1 2026-05-07 17:07:42 UTC

  opam (2.1.2-1+deb12u1build0.22.04.1) jammy-security; urgency=medium

  * fake sync from Debian
    - Fixes CVE-2026-41082

 -- Hlib Korzhynskyy <email address hidden> Wed, 06 May 2026 17:29:01 -0230

CVE-2026-41082 In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.



About   -   Send Feedback to @ubuntu_updates