Back Linuxsecurity

Fedora 44 opam Important Fix Buffer Overflow CVE-2026

Linuxsecurity •LinuxSecurity Advisories • July 19, 2026

Version 2.5.2 of opam fixes CVE-2026-57825. See for more information.

* Fri Jul 10 2026 Jerry James - 2.5.2-1 - OCaml 5.5.0 rebuild - Version 2.5.2

Fedora Update Notification FEDORA-2026-239dbbff34 2026-07-19 05:46:37.002193+00:00 Name : opam Product : Fedora 44 Version : 2.5.2 Release : 1.fc44 URL : Summary : Source-based package manager for OCaml Description : Opam is a source-based package manager for OCaml. It supports multiple simultaneous compiler installations, flexible package constraints, and a Git-friendly development workflow.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-239dbbff34' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora Opam Update Addresses Critical Buffer Overflow Vulnerability Fedora has released updates for the opam package manager to address CVE-2026-57825, a critical buffer overflow vulnerability. This vulnerability affects versions of opam in both Fedora 43 and 44, potentially allowing attackers to execute arbitrary code. The updates are available for installation via the 'dnf' package manager. Users are advised to upgrade to version 2.5.2 to mitigate the risk associated with this vulnerability. The updates were published on July 19, 2026, following a rebuild of OCaml 5.5.0. The vulnerability was confirmed by Jerry James, the maintainer of the opam package. Immediate action is recommended for users of affected Fedora versions to ensure system security. 2 sources 73

Extracted Entities

Fedora 44 opam Important Fix Buffer Overflow CVE-2026

The full story

Extracted Entities

Companies (1)

CVEs (1)

CWE Weaknesses (1)