From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail2-relais-roc.national.inria.fr (mail2-relais-roc.national.inria.fr [192.134.164.83]) by c5ff346549e7 (Postfix) with ESMTPS id 262765D5 for ; Mon, 7 May 2018 09:50:54 +0000 (UTC) X-IronPort-AV: E=Sophos;i="5.49,373,1520895600"; d="scan'208";a="326028412" Received: from sympa.inria.fr ([193.51.193.213]) by mail2-relais-roc.national.inria.fr with ESMTP; 07 May 2018 11:50:52 +0200 Received: by sympa.inria.fr (Postfix, from userid 20132) id 1BAD78240C; Mon, 7 May 2018 11:50:52 +0200 (CEST) Received: from mail2-relais-roc.national.inria.fr (mail2-relais-roc.national.inria.fr [192.134.164.83]) by sympa.inria.fr (Postfix) with ESMTPS id C138E8240C for ; Mon, 7 May 2018 11:50:02 +0200 (CEST) Authentication-Results: mail2-smtp-roc.national.inria.fr; spf=None smtp.pra=louis.gesbert@ocamlpro.com; spf=None smtp.mailfrom=louis.gesbert@ocamlpro.com; spf=Pass smtp.helo=postmaster@mail.antislash.info IronPort-PHdr: =?us-ascii?q?9a23=3AY/ZRLRzn8ObE5ZvXCy+O+j09IxM/srCxBDY+r6Qd?= =?us-ascii?q?1OwRIJqq85mqBkHD//Il1AaPAd2Araocw8Pt8InYEVQa5piAtH1QOLdtbDQizf?= =?us-ascii?q?ssogo7HcSeAlf6JvO5JwYzHcBFSUM3tyrjaRsdF8nxfUDdrWOv5jAOBBr/KRB1?= =?us-ascii?q?JuPoEYLOksi7ze+/94HdbglSmDaxfa55IQmrownWqsQYm5ZpJLwryhvOrHtIeu?= =?us-ascii?q?BWyn1tKFmOgRvy5dq+8YB6/ShItP0v68BPUaPhf6QlVrNYFygpM3o05MLwqxbO?= =?us-ascii?q?SxaE62YGXWUXlhpIBBXF7A3/U5zsvCb2qvZx1S+HNsDwULs6Wymt771zRRHoli?= =?us-ascii?q?kJKjA3/mLYhcJ/kK1Wuw6hpwVlzoLIfI2ZKPhzc6XAdt0aX2pBWcNRWjRHDIO7?= =?us-ascii?q?cosPDvEBNvtZoYbjvFsBtgWxBROwBOjyzTJIgnj23bA70+Q6Cw3G0xIvH8kVv3?= =?us-ascii?q?vKttX1KLwfUeepw6bSyDXDa+tW2S366ITSbh8hpvSMUKt2fMHMx0cvEAbFgU+R?= =?us-ascii?q?qYzjJz6V0fgCvHKe7+pkT+6vjHQnqw53rzOyxckskpHEi4wXx1ze6Cl0w4Q4Kc?= =?us-ascii?q?emREN0btOoCpVduiCcOoBrWM0tWXtotzw/yrAeuZ60YiwKyJM/yh7acfOHcoyI?= =?us-ascii?q?7gj5W+aXPTd4hWlleLaliBap8Uis0Oz8Vs+60FZNtiZFk9/MuW4R1xHL5MWKSO?= =?us-ascii?q?Fx8lqi1DuNzQzf9O5JLE8umafVKpMt2rswmYASsUTHEC/2gkL2jKqOe0Ug/eio?= =?us-ascii?q?9uXnYq78qp+TKYB0kRrxPbo0msyjGuk4NRQBUHKe+eS4zL3j50r5TK9Wgf0xl6?= =?us-ascii?q?nVqIraKtgDpq6lHw9V1Z4u5AqlADej1NQUhH0HLFNeeBKblIXpIFHPIPXgDfil?= =?us-ascii?q?mViskTFrx+rHPrL7GJnNIGLDw//deuN24ktYjQ4y1swXs5ldD7VEJPPoRmfwss?= =?us-ascii?q?bZB1k3KVrn7fzgDYBZ0Z4fQiqgD7STPbnO+QuM4f8uOK+DaZQftSzhA/8u7vvq?= =?us-ascii?q?lWU+31QaeP/6jtMsdHmkE6E+cA2ian32j4JZSDZYjk8FVOXvzWa6f3tWbne2Ub?= =?us-ascii?q?g742hnWoWtBILHXpqqxreG2XXjR8EEViV9ElmJVEzQWcCcQf5VNHCVKcZkliQe?= =?us-ascii?q?Uv6qTIpzjUjz5j+/8KJuK6/vwgNdtZ/n04IstejalBV0/DpoDt+Z2nqNCWBykG?= =?us-ascii?q?RaHjI=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CKCADyH/Ba/yT0uyVcHQEBCwEFAYMVg?= =?us-ascii?q?RB6hBeIYI8cgWWJNYIKhgIUgWQLI4RTglwFAgQyFgECAQEBAQEBAQEBaxwMgjU?= =?us-ascii?q?ignuBCwIFDBUCEQFNhTgLpyOCHIg9gjMFgQmIcD+ISDhMgkGCVAKDcYM9LoRpb?= =?us-ascii?q?op3CIFlhACKHYYRhRsBXYZkggWEGIJugSUjBSw6gRgzGiNXgXgLOosPhUA9jgG?= =?us-ascii?q?CRAEB?= X-IPAS-Result: =?us-ascii?q?A0CKCADyH/Ba/yT0uyVcHQEBCwEFAYMVgRB6hBeIYI8cgWW?= =?us-ascii?q?JNYIKhgIUgWQLI4RTglwFAgQyFgECAQEBAQEBAQEBaxwMgjUignuBCwIFDBUCE?= =?us-ascii?q?QFNhTgLpyOCHIg9gjMFgQmIcD+ISDhMgkGCVAKDcYM9LoRpbop3CIFlhACKHYY?= =?us-ascii?q?RhRsBXYZkggWEGIJugSUjBSw6gRgzGiNXgXgLOosPhUA9jgGCRAEB?= X-IronPort-AV: E=Sophos;i="5.49,373,1520895600"; d="scan'208";a="326028063" Received: from antislash.info (HELO mail.antislash.info) ([37.187.244.36]) by mail2-smtp-roc.national.inria.fr with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 07 May 2018 11:50:02 +0200 From: Louis Gesbert To: caml-list Date: Mon, 07 May 2018 11:49:58 +0200 Message-ID: <2822590.FcTDX2uvtl@maitake> MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Validation-by: meta@antislash.info Subject: [Caml-list] [URGENT] To all macOS/BSD opam users: critical problem with camlp5 7.03 Reply-To: Louis Gesbert X-Loop: caml-list@inria.fr X-Sequence: 16882 Errors-to: caml-list-owner@inria.fr Precedence: list Precedence: bulk Sender: caml-list-request@inria.fr X-no-archive: yes List-Id: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: !! opam users on macOS or BSD systems are at risk of losing their files !! if they didn't update since Feb. 18th. Full details, including advice for restoring your system to safety, are available at https://opam.ocaml.org/blog/camlp5-system/ A problem was identified in February with the camlp5 7.03 package when=20 installed via opam. Under certain circumstances, it is possible for the=20 package removal instructions to execute `rm -rf /` with potentially devastating consequences for your files if your rm command is non-GNU (and = so=20 doesn=E2=80=99t support the --preserve-root default option) which includes = macOS and=20 other BSDs. Initially, this was seen non-fatally on GNU/Linux systems and it was believ= ed=20 to have been successfully patched on 18 Feb with only a 48 hour window for= =20 problems for anyone who updated opam between 16 and 18 Feb and then hadn=E2= =80=99t=20 updated since, however we failed to take upgrading the system compiler into account. If you haven=E2=80=99t updated opam since 18 Feb 201= 8, have=20 camlp5 installed in your system switch and upgrade your system compiler to= =20 OCaml 4.06.1 using your OS package manager, then your system is at risk fro= m=20 this issue. Most regrettably, several users have been hit by this issue. This issue=20 affects opam 1.x only - if you have been testing the opam 2 release candida= te=20 then your system is not affected (but we still recommend you run opam updat= e=20 regularly). We are trying to reach as widely as possible in the hope that everyone will= be=20 safe from this issue. It is taken seriously, and sandboxing support for Lin= ux=20 and MacOS was added to the upcoming opam 2 Release Candidate 2, ensuring th= is=20 kind of issue won't happen again in the future. Louis Gesbert =E2=80=94 OCamlPro --=20 Caml-list mailing list. Subscription management and archives: https://sympa.inria.fr/sympa/arc/caml-list Beginner's list: http://groups.yahoo.com/group/ocaml_beginners Bug reports: http://caml.inria.fr/bin/caml-bugs=