[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#27462: OCaml CVE-2015-8869
From: |
Andreas Enge |
Subject: |
bug#27462: OCaml CVE-2015-8869 |
Date: |
Wed, 20 Feb 2019 12:27:47 +0100 |
User-agent: |
Mutt/1.11.2 (2019-01-07) |
On Wed, Feb 20, 2019 at 09:39:20AM +0100, Julien Lepiller wrote:
> At this point, we only need it for bap and dependencies. I've added
> dependencies for the latest bap commit that work with the latest ocaml, but
> they haven't released a new version yet. Can we wait a bit longer?
>
> Another solution would be to jump to ocaml 4.05 and re-package another
> version of ~50 dependencies. I don't really want to do that…
I understand! Waiting a bit more should be okay given how long this bug
is already open... Or packaging a current snapshot of bap (with suitable
numbering as laid out, I think, in the documentation, so that users
will upgrade automatically from the current version over the snapshot to
the next released version).
Thanks,
Andreas