oss-sec mailing list archives

CVE request: opam - missing certificate validation


From: Matthias Geerdsen <matthias () vorlons info>
Date: Mon, 18 Apr 2016 23:25:32 +0200

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

please assign a CVE ID for this missing certicate validation issue in
ocaml:

- - upstream commit:
<https://github.com/ocaml/opam/commit/3d43295df3bb9e67e60801d319bf82c2c8
a84d24>
- - Debian bug: <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=818081>


Thanks
Matthias
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXFVDHAAoJEDVYuxv9Aw7quJsH/RvH7BSmAFfLfWdm1PNsE8Uy
zOI+bv/JDCKJlitDOX5SOyofXNG0RWzcEVQCHw6D52pgfkRIoFeFfPHYyaMtM3Zp
jBLqEczh7CMNXq47c0TkEzlKg5y7i+Qk2sSBQYLBju+UxwzfTWV/J/1eEC7XHWug
Vc+myOvp7+zm8vZKMXFvRiGozJfzEutTxMVuXjomlOqoJunWoF1fWVXaSKSLjUW0
RRNZSeK+Y89l850RlIQ3KLvbdWIsSVWvqVtDEACyDIeIpyOtYnfJ2aN8ISa9vP2G
1pBbh/r29ZUTmC9feqExlOw5rlL3zdcq8tedSS38F5tpANnEHgulZktxByPTJA4=
=PALs
-----END PGP SIGNATURE-----


Current thread: