Back Linuxsecurity

Fedora 43 Opam Critical CVE-2026-57825 Advisory ID 2026

Linuxsecurity •LinuxSecurity Advisories • July 19, 2026

Version 2.5.2 of opam fixes CVE-2026-57825. See for more information.

* Fri Jul 10 2026 Jerry James - 2.5.2-1 - Version 2.5.2

Fedora Update Notification FEDORA-2026-fb48505840 2026-07-19 03:55:06.729078+00:00 Name : opam Product : Fedora 43 Version : 2.5.2 Release : 1.fc43 URL : Summary : Source-based package manager for OCaml Description : Opam is a source-based package manager for OCaml. It supports multiple simultaneous compiler installations, flexible package constraints, and a Git-friendly development workflow.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-fb48505840' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora Opam Update Addresses Critical Buffer Overflow Vulnerability Fedora has released updates for the opam package manager to address CVE-2026-57825, a critical buffer overflow vulnerability. This vulnerability affects versions of opam in both Fedora 43 and 44, potentially allowing attackers to execute arbitrary code. The updates are available for installation via the 'dnf' package manager. Users are advised to upgrade to version 2.5.2 to mitigate the risk associated with this vulnerability. The updates were published on July 19, 2026, following a rebuild of OCaml 5.5.0. The vulnerability was confirmed by Jerry James, the maintainer of the opam package. Immediate action is recommended for users of affected Fedora versions to ensure system security. 2 sources 73

Extracted Entities

CVEs (1)

CVE-2026-57825