gaia

Gaia: Global API Integrity Assessor Dependencies Install opam to build the tests API. Install git, python3, pip and .NET to build RESTler and Schemathesis. Install cargo to build Gaia. Install docker v26.0.1 and docker compose v2.26.1 to build Gaia with the ELK Stack optionnal if not. Install nod...

Astra Linux – Vulnerability in OpAM

In OCaml opam before version 2.5.1, a .install field containing a destination filepath can use ../ to access the parent directory...

[SECURITY] Fedora 45 Update: opam-2.5.2-5.fc45

Opam is a source-based package manager for OCaml. It supports multiple simultaneous compiler installations, flexible package constraints, and a Git-friendly development workflow...

[SECURITY] Fedora 45 Update: ocaml-opam-file-format-2.2.0-11.fc45

Parser and printer for the opam file syntax...

[SECURITY] Fedora 45 Update: ocaml-opam-0install-cudf-0.5.0-11.fc45

Opam's default solver is designed to maintain a set of packages over time, minimizing disruption when installing new programs and finding a compromise solution across all packages e.g. avoiding upgrading some library to prevent uninstalling another program. In many situations e.g. a CI system...

SUSE CVE-2026-57825

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...

CVE-2026-57825

A flaw was found in the opam package manager for OCaml. This vulnerability allows a malicious package to bypass the sandbox protection mechanism. By mishandling symlinks during the processing of .install files, an attacker can write arbitrary files to unintended locations on the system, potential...

CVE-2026-57825

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...

CVE-2026-57825

In opam (OCaml package manager) versions before 2.5.2 , the sandbox protection mechanism can be bypassed due to mishandled symlinks during .install file processing. Specifically, installing files through .install files did not check symlink resolution on the target path, allowing a package to ins...

CVE-2026-57825

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...

CVE-2026-57825

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...

CVE-2026-57825

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...

CVE-2026-57825

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...

EUVD-2026-74594

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...

CVE-2026-57825: UNIX Symbolic Link (Symlink) Following

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...

CVE-2026-57825

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...

openSUSE 16 Security Update : opam (openSUSE-SU-2026:21380-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21380-1 advisory. Changes in opam: - Update to version 2.5.2 CVE-2026-57825 see included CHANGES file for details - Update to version 2.5.1 CVE-2026-41082...

Security update for opam (important)

openSUSE security update: security update for opam ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21380-1 Rating: important References: bsc1262281 Cross-References: CVE-2026-41082 CVE-2026-57825 CVSS scores: CVE-2026-41082 SUSE : 5.1...

[SECURITY] Fedora 43 Update: opam-2.5.2-1.fc43

Opam is a source-based package manager for OCaml. It supports multiple simultaneous compiler installations, flexible package constraints, and a Git-friendly development workflow...

Fedora 43 : opam (2026-fb48505840)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fb48505840 advisory. Version 2.5.2 of opam fixes CVE-2026-57825. See https://github.com/ocaml/opam/releases/tag/2.5.2 for more information. Tenable has extracted the preceding...