[Bug 787888] CVE-2012-0839 ocaml: hash table collisions CPU usage DoS (oCERT-2011-003)

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.

https://bugzilla.redhat.com/show_bug.cgi?id=787888

--- Comment #4 from Kurt Seifried  2012-04-03 00:21:35 EDT ---
I misspoke, they are still discussing fixing it in this thread:

http://www.mail-archive.com/[e-mail]/msg02104.html

"OCaml 3.13 will provide options for Hashtbl allowing it pass a seed, but
only in a case by case way. What will not be included in OCaml 3.13 is
access to RNGs with entropy injection (i.e. it is left to the programmer
to solve this difficulty)."