Packages / openSUSE Tumbleweed / Unspecified / opam-installer

Package: opam-installer (2.5.2-1.4)

Standalone tool for opam install files

Handles (un)installation of package files following instructions from OPAM *.install files.

Other Packages Related to opam-installer:

dep: ld-linux-x86-64.so.2()(64bit)
Package not available
dep: ld-linux-x86-64.so.2(GLIBC_2.3)(64bit)
Package not available
dep: libm.so.6()(64bit)
Package not available
dep: libm.so.6(GLIBC_2.2.5)(64bit)
Package not available
dep: libm.so.6(GLIBC_2.29)(64bit)
Package not available
dep: libm.so.6(GLIBC_2.35)(64bit)
Package not available
dep: libm.so.6(GLIBC_2.38)(64bit)
Package not available
dep: [opam] (= 2.5.2-1.4)
Source-based package manager for OCaml
dep: libc.so.6(GLIBC_2.42)(64bit)
Package not available

Download opam-installer

Architecture	Package size	Installed size	Files	Package
x86_64	1.6 MiB	5.7 MiB	list of files	Download

Package file paths (1)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/bin/opam-installer

Field source: openSUSE Tumbleweed OSS

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try openSUSE Tumbleweed in the browser Build an image that includes opam-installer

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
2.5.2-1.4	tumbleweed / oss	x86_64	openSUSE Tumbleweed · OSS · multi-architecture	1.6 MiB	5.7 MiB	x86_64/opam-installer-2.5.2-1.4.x86_64.rpm

Field source: openSUSE Tumbleweed OSS

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE Severity Version impact

CVE	Severity	Version impact
[CVE-2026-57825] Published: Jul 17, 2026, 12:00:00 AM UTC opam: CVE-2026-57825	Medium(6.8)	Unknown Details (1) `2.5.2-1.4` · x86_64 · tumbleweed Unknown · Fixed: `2.5.2-1.2` Version impact unknown dsa · opam · opensuse · tumbleweed
[CVE-2026-41082] Published: Apr 16, 2026, 5:32:40 PM UTC In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.	High(7.3)	Unknown Details (1) `2.5.2-1.4` · x86_64 · tumbleweed Unknown · Fixed: `2.5.1-1.1` Version impact unknown nvd · opam · opensuse · tumbleweed

[CVE-2026-57825]

Published: Jul 17, 2026, 12:00:00 AM UTC

opam: CVE-2026-57825

Medium(6.8)

Unknown

Details (1)

2.5.2-1.4 · x86_64 · tumbleweed
Unknown · Fixed: 2.5.2-1.2
Version impact unknown
dsa · opam · opensuse · tumbleweed

[CVE-2026-41082]

Published: Apr 16, 2026, 5:32:40 PM UTC

In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.

High(7.3)

Unknown

Details (1)

2.5.2-1.4 · x86_64 · tumbleweed
Unknown · Fixed: 2.5.1-1.1
Version impact unknown
nvd · opam · opensuse · tumbleweed

Last synced: Oct 28, 2026, 3:52:27 AM UTC

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

2.5.2-1.4 / x86_64Observed Sep 1, 2026sha512 a5f97ebc4018…cd5123fcSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): a5f97ebc401888ff0744a052cf6b2e68ebd5caeae3bb0689a223e4929e503f1db391a9bec43ad84d43015bb20ad79c798b9c741e3b531f758a43623ecd5123fc

Field source: openSUSE Tumbleweed OSS

Sources

openSUSE Tumbleweed OSSSep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Repository-signature verification record
Signed object
https://download.opensuse.org/tumbleweed/repo/oss/repodata/repomd.xml
Signed-object SHA-256
4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Signer fingerprint
AD485664E901B867051AB15F35A2F86E29B700A4
Keyring revision
opensuse-project-signing-key.asc
SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable