Synopsis:          Moderate: ocaml security update
Advisory ID:       SLSA-2016:1296-1
Issue Date:        2016-06-23
CVE Numbers:       CVE-2015-8869
--

Security Fix(es):

* OCaml versions 4.02.3 and earlier have a runtime bug that, on 64-bit
platforms, causes size arguments to internal memmove calls to be sign-
extended from 32- to 64-bits before being passed to the memmove function.
This leads to arguments between 2GiB and 4GiB being interpreted as larger
than they are (specifically, a bit below 2^64), causing a buffer overflow.
Further, arguments between 4GiB and 6GiB are interpreted as 4GiB smaller
than they should be, causing a possible information leak. (CVE-2015-8869)
--

SL7
  x86_64
    ocaml-4.01.0-22.7.el7_2.x86_64.rpm
    ocaml-camlp4-4.01.0-22.7.el7_2.x86_64.rpm
    ocaml-camlp4-devel-4.01.0-22.7.el7_2.x86_64.rpm
    ocaml-compiler-libs-4.01.0-22.7.el7_2.x86_64.rpm
    ocaml-debuginfo-4.01.0-22.7.el7_2.x86_64.rpm
    ocaml-docs-4.01.0-22.7.el7_2.x86_64.rpm
    ocaml-emacs-4.01.0-22.7.el7_2.x86_64.rpm
    ocaml-labltk-4.01.0-22.7.el7_2.x86_64.rpm
    ocaml-labltk-devel-4.01.0-22.7.el7_2.x86_64.rpm
    ocaml-ocamldoc-4.01.0-22.7.el7_2.x86_64.rpm
    ocaml-runtime-4.01.0-22.7.el7_2.x86_64.rpm
    ocaml-source-4.01.0-22.7.el7_2.x86_64.rpm
    ocaml-x11-4.01.0-22.7.el7_2.x86_64.rpm

Additionally, the 7.0 release required the following dependencies 
already updated in 7.1 and 7.2:
  x86_64
    brlapi-0.6.0-9.el7.i686.rpm
    brlapi-0.6.0-9.el7.x86_64.rpm
    brlapi-devel-0.6.0-9.el7.i686.rpm
    brlapi-devel-0.6.0-9.el7.x86_64.rpm
    brlapi-java-0.6.0-9.el7.x86_64.rpm
    brltty-4.5-9.el7.x86_64.rpm
    brltty-at-spi-4.5-9.el7.x86_64.rpm
    brltty-docs-4.5-9.el7.noarch.rpm
    brltty-xw-4.5-9.el7.x86_64.rpm
    graphviz-2.30.1-19.el7.i686.rpm
    graphviz-2.30.1-19.el7.x86_64.rpm
    graphviz-devel-2.30.1-19.el7.i686.rpm
    graphviz-devel-2.30.1-19.el7.x86_64.rpm
    graphviz-doc-2.30.1-19.el7.x86_64.rpm
    graphviz-gd-2.30.1-19.el7.i686.rpm
    graphviz-gd-2.30.1-19.el7.x86_64.rpm
    graphviz-graphs-2.30.1-19.el7.x86_64.rpm
    graphviz-guile-2.30.1-19.el7.x86_64.rpm
    graphviz-java-2.30.1-19.el7.x86_64.rpm
    graphviz-lua-2.30.1-19.el7.x86_64.rpm
    graphviz-ocaml-2.30.1-19.el7.x86_64.rpm
    graphviz-perl-2.30.1-19.el7.x86_64.rpm
    graphviz-php-2.30.1-19.el7.x86_64.rpm
    graphviz-python-2.30.1-19.el7.x86_64.rpm
    graphviz-ruby-2.30.1-19.el7.x86_64.rpm
    graphviz-tcl-2.30.1-19.el7.i686.rpm
    graphviz-tcl-2.30.1-19.el7.x86_64.rpm
    hivex-1.3.10-5.7.sl7.i686.rpm
    hivex-1.3.10-5.7.sl7.x86_64.rpm
    hivex-devel-1.3.10-5.7.sl7.i686.rpm
    hivex-devel-1.3.10-5.7.sl7.x86_64.rpm
    ocaml-brlapi-0.6.0-9.el7.x86_64.rpm
    ocaml-calendar-2.03.2-5.el7.x86_64.rpm
    ocaml-calendar-devel-2.03.2-5.el7.x86_64.rpm
    ocaml-csv-1.2.3-6.el7.x86_64.rpm
    ocaml-csv-devel-1.2.3-6.el7.x86_64.rpm
    ocaml-curses-1.0.3-18.el7.x86_64.rpm
    ocaml-curses-devel-1.0.3-18.el7.x86_64.rpm
    ocaml-extlib-1.5.3-5.el7.x86_64.rpm
    ocaml-extlib-devel-1.5.3-5.el7.x86_64.rpm
    ocaml-fileutils-0.4.4-7.el7.x86_64.rpm
    ocaml-fileutils-devel-0.4.4-7.el7.x86_64.rpm
    ocaml-findlib-1.3.3-6.el7.x86_64.rpm
    ocaml-findlib-devel-1.3.3-6.el7.x86_64.rpm
    ocaml-gettext-0.3.4-13.el7.x86_64.rpm
    ocaml-gettext-devel-0.3.4-13.el7.x86_64.rpm
    ocaml-hivex-1.3.10-5.7.sl7.x86_64.rpm
    ocaml-hivex-devel-1.3.10-5.7.sl7.x86_64.rpm
    ocaml-labltk-devel-4.01.0-22.2.el7.x86_64.rpm
    ocaml-libguestfs-devel-1.28.1-1.18.el7.x86_64.rpm
    ocaml-libvirt-0.6.1.2-10.el7.x86_64.rpm
    ocaml-libvirt-devel-0.6.1.2-10.el7.x86_64.rpm
    ocaml-xml-light-2.3-0.6.svn234.el7.x86_64.rpm
    ocaml-xml-light-devel-2.3-0.6.svn234.el7.x86_64.rpm
    perl-hivex-1.3.10-5.7.sl7.x86_64.rpm
    python-brlapi-0.6.0-9.el7.x86_64.rpm
    python-hivex-1.3.10-5.7.sl7.x86_64.rpm
    ruby-hivex-1.3.10-5.7.sl7.x86_64.rpm
    tcl-brlapi-0.6.0-9.el7.x86_64.rpm

- Scientific Linux Development Team