-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 20 Apr 2026 18:02:30 +0200 Source: opam Architecture: source Version: 2.0.8-1+deb11u1 Distribution: bullseye-security Urgency: medium Maintainer: Debian OCaml Maintainers <debian-ocaml-maint@lists.debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Changes: opam (2.0.8-1+deb11u1) bullseye-security; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2026-41082: file installation outside sandbox space. Checksums-Sha1: 9a430e6529a11a60b782fbdb12072494387805b1 2603 opam_2.0.8-1+deb11u1.dsc 736424ac249ad0313962b44e01bb0ec65c7440de 722694 opam_2.0.8.orig.tar.gz 2a7a1fed3738d14d272c125644990e4b35e5f07a 11500 opam_2.0.8-1+deb11u1.debian.tar.xz 47936696308360e76e0c454077615bae6a65431c 6465 opam_2.0.8-1+deb11u1_source.buildinfo Checksums-Sha256: bea4c7b9958e6efac8594cf22e7f5c13381e448996711041ee4406d2b6edbd72 2603 opam_2.0.8-1+deb11u1.dsc e6af6623f2f132f901a941765c287c51301ed199b26922b1dfe4a54073dda9dc 722694 opam_2.0.8.orig.tar.gz 4120ac73dd4ae639d402f9e380b4505414f032eedc5a2f41581c86075a1d0f75 11500 opam_2.0.8-1+deb11u1.debian.tar.xz 30df9b51f2ab2e55c1a9fc73d1dbf6917d13c8482e3425a8421c016d812e00b8 6465 opam_2.0.8-1+deb11u1_source.buildinfo Files: 3450a8922153b8cab0f289fec70a3d58 2603 ocaml optional opam_2.0.8-1+deb11u1.dsc a9f1057328ab30343821bd3647ba08b0 722694 ocaml optional opam_2.0.8.orig.tar.gz 0cebd9b6d819dbb6e6d3a49f5b7d7806 11500 ocaml optional opam_2.0.8-1+deb11u1.debian.tar.xz 5af3259cebe6e58cfd1369b9c7dfc764 6465 ocaml optional opam_2.0.8-1+deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmnmU+gACgkQnUbEiOQ2 gwKHoBAAydFopOKh207FvH4Xnmp1bbejwlidotziKvM51hEuBSVc2WyDCsJSK/1l 1jbzfDg05hF78DTucCNnQl2YRiTUnPOaRYtycV93BjDWijNmfNcyIFkfNq+S2V71 LYN5Cn2U/p0d2KB0EA456XNxsAxUOPW9nqggXInxBLBqEj8B1jqtfNCHCzCzso8y 76gsudsCoYlyPKW0t0YICwifTDJNjiZ6xdj9Phaysg3ZJkwydXtUS/2QX0kI8O4Y dhk/5p2WDmGw9lrg7N7sY3JD8ftgeD6NWZdjArJz9aBO0Gje2Vk98A+DUNEa+0FT RR4atboKQwTfbO2Wl/dW0JGgJVH7GTM10WC8Px7dH2W48zkc+wQRqUeoh7r7V66n VXyUELxcT9fwytIKgzZ/LeexErEhLoVtki6nHnAKI/ZUSpNb1shw1iJD7GVd6CvZ HsYfjZ723Xqq4QLw7AKw7KsBNH/VuEeLW1QyUyhIBGNi7tCHUVvKDn2WjkjCaedR m3yPoew24rMxB4NGs+ihVxJrQJ/TrlkX5Wn+Siw1XaQzXbOfXhgwQPgSv8cJXTU/ CETwDCxGqKgMabetIenjvPLzE4vl3xVWD2DFtjs22ZVh3igs4dptL49wIiV6oi7T doCT4r/tN7CXPhU8kYVOtsJdVUlWMjPWhwotxcfIB0BfxgXSlA4= =r6c7 -----END PGP SIGNATURE-----