An ocaml update has been released for openSUSE Leap 42.3 to address an integer overflow in the caml_ba_deserialize function. This allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted object.
Ocaml Update for openSUSE