From debbugs-submit-bounces@debbugs.gnu.org Tue Feb 19 17:18:12 2019 Received: (at submit) by debbugs.gnu.org; 19 Feb 2019 22:18:12 +0000 Received: from localhost ([127.0.0.1]:56825 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1gwDiO-0000fy-1V for submit@debbugs.gnu.org; Tue, 19 Feb 2019 17:18:12 -0500 Received: from eggs.gnu.org ([209.51.188.92]:57624) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1gwDiL-0000fl-He for submit@debbugs.gnu.org; Tue, 19 Feb 2019 17:18:10 -0500 Received: from lists.gnu.org ([209.51.188.17]:41701) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1gwDiF-0005dc-Ns for submit@debbugs.gnu.org; Tue, 19 Feb 2019 17:18:03 -0500 Received: from eggs.gnu.org ([209.51.188.92]:43766) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gwDiE-0005Zt-VG for bug-guix@gnu.org; Tue, 19 Feb 2019 17:18:03 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-0.0 required=5.0 tests=BAYES_20 autolearn=disabled version=3.3.2 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gwDiB-0005cZ-7M for bug-guix@gnu.org; Tue, 19 Feb 2019 17:18:01 -0500 Received: from hera.aquilenet.fr ([2a0c:e300::1]:36718) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1gwDi9-0005Zw-QZ for bug-guix@gnu.org; Tue, 19 Feb 2019 17:17:58 -0500 Received: from localhost (localhost [127.0.0.1]) by hera.aquilenet.fr (Postfix) with ESMTP id D35B02C48; Tue, 19 Feb 2019 23:17:54 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at aquilenet.fr Received: from hera.aquilenet.fr ([127.0.0.1]) by localhost (hera.aquilenet.fr [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hX2jXy5dRN0W; Tue, 19 Feb 2019 23:17:54 +0100 (CET) Received: from jurong (unknown [IPv6:2001:910:103f:0:2d09:8018:be35:9702]) by hera.aquilenet.fr (Postfix) with ESMTPSA id 07220222A; Tue, 19 Feb 2019 23:17:53 +0100 (CET) Date: Tue, 19 Feb 2019 23:17:52 +0100 From: Andreas Enge To: Julien Lepiller Subject: Re: bug#27462: OCaml CVE-2015-8869 Message-ID: <20190219221752.GA4351@jurong> References: <20190131165613.GA27597@jurong> <20190131172113.GA29071@jurong> <96513178-922C-49D6-AF32-0EF723343C8E@lepiller.eu> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <96513178-922C-49D6-AF32-0EF723343C8E@lepiller.eu> User-Agent: Mutt/1.11.2 (2019-01-07) X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 2a0c:e300::1 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Spam-Score: 0.7 (/) X-Debbugs-Envelope-To: submit Cc: 27462@debbugs.gnu.org, bug-guix@gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.3 (/) On Thu, Jan 31, 2019 at 06:30:27PM +0100, Julien Lepiller wrote: > I still care about ocaml-4.02, but I could probably update it to ocaml-4.04 without breaking dependents. Commits 2e125ece093ef842ca017ffb146cbc5fa33f2f75 and 4982c0c98deecea0d4f69f14ea28cab53b5f2123 remove ocaml@4.01, pplacer and all other dependent packages. Is ocaml@4.02 really needed? It would be nice to get rid of a package with CVE. Andreas