Andrew Nesbitt discovered that .install file directives were insufficiently restricted in OPAM, a package manager for OCaml. This could result in directory traversal out of the package area.
https://security-tracker.debian.org/tracker/DSA-6216-1
Continue reading...
https://security-tracker.debian.org/tracker/DSA-6216-1
Continue reading...

