Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-57825 →

DEBIAN-CVE-2026-57825

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install fi...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 opam

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1+deb12u2"}]}]

Debian:13 opam

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-1+deb13u2"}]}]

Debian:14 opam

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-1"}]}]

Références

advisory security-tracker.debian.org