CVE-2026-41082

Publication date 17 April 2026

Last updated 23 April 2026


Ubuntu priority

Description

(In OCaml opam before 2.5.1, a .install field containing a destination ...)

Read the notes from the security team

Status

Package Ubuntu Release Status
opam 25.10 questing
Vulnerable
24.04 LTS noble
Vulnerable
22.04 LTS jammy
Vulnerable
20.04 LTS focal
Vulnerable
18.04 LTS bionic
Vulnerable
16.04 LTS xenial
Vulnerable

Notes


john-breton

Backports to xenial and bionic will require a significant amount of effort due to the older versions of opam. Upstream has only released a fix targeting 2.5.X.

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
opam

Access our resources on patching vulnerabilities