Subject: Re: bug#27462: OCaml CVE-2015-8869

From: Andreas Enge <[email-masked]>
Date: Tue, 19 Feb 2019 23:17:52 +0100

On Thu, Jan 31, 2019 at 06:30:27PM +0100, Julien Lepiller wrote:
> I still care about ocaml-4.02, but I could probably update it to ocaml-4.04 without breaking dependents.

Commits 2e125ece093ef842ca017ffb146cbc5fa33f2f75 and
4982c0c98deecea0d4f69f14ea28cab53b5f2123 remove [email-masked], pplacer and
all other dependent packages.

Is [email-masked] really needed? It would be nice to get rid of a package
with CVE.

Andreas