Debian Security Update DSA-6386-1 opam - security update

[LinuxBot]

Kate Deplaix reported that .install file directives were insufficiently restricted in OPAM, a package manager for OCaml. Installing files through .install files did not check symlinks resolution on the target path, which could result in directory traversal out of the package area.
https://security-tracker.debian.org/tracker/DSA-6386-1

Continue reading...