Add the announce for opam 2.5.2

data/platform_releases/opam/2026-07-09-opam-2-5-2.md

@@ -0,0 +1,61 @@
+---
+title: "opam 2.5.2"
+authors: [
+  "Raja Boujbel",
+  "Kate Deplaix",
+  "Nathan Rebours",
+  "David Allsopp",
+]
+versions: ["2.5.2"]
+tags: [opam, platform]
+github_release_tags: [2.5.2]
+---
+
+_Feedback on this post is welcomed on [Discuss](https://discuss.ocaml.org/t/ann-opam-2-5-2/18338)!_
+
+We are pleased to announce the release of opam 2.5.2 fixing a security issue ([OSEC-2026-10](https://github.com/ocaml/security-advisories/blob/main/advisories/2026/OSEC-2026-10.md)) and other minor things.
+
+We advise everyone to upgrade. Please read on for installation and upgrade instructions.
+
+
+## Security fix
+
+
+* [OSEC-2026-10](https://osv.dev/vulnerability/OSEC-2026-10) / CVE-2026-57825: Fix a bug that allowed a package to install files anywhere on the system using a symlink to an external directory without warning the user and asking for their permission ([#7005](https://github.com/ocaml/opam/pull/7005))
+
+Distributions maintainers that have not already done so, are invited to either upgrade their opam package to 2.5.2 or backport the fix. For any questions please send an email to the authors of this here blog post as listed above.
+
+
+## Other changes
+
+* Re-allow `..` in `.install` files, partially reverting 2.5.1's [#6898](https://github.com/ocaml/opam/pull/6898) ([#7009](https://github.com/ocaml/opam/pull/7009), [ocaml/dune#14393](https://github.com/ocaml/dune/issues/14393))
+
+
+## Try it!
+
+The upgrade instructions are unchanged:
+
+1. Either from binaries: run
+
+For Unix systems
+```
+bash -c "sh <(curl -fsSL https://opam.ocaml.org/install.sh) --version 2.5.2"
+```
+or from PowerShell for Windows systems
+```
+Invoke-Expression "& { $(Invoke-RestMethod https://opam.ocaml.org/install.ps1) } -Version 2.5.2"
+```
+or download manually from [the Github "Releases" page](https://github.com/ocaml/opam/releases/tag/2.5.2) to your PATH.
+
+2. Or from source, manually: see the instructions in the [README](https://github.com/ocaml/opam/tree/2.5.2#compiling-this-repo).
+
+
+You should then run:
+```
+opam init --reinit -ni
+```
+
+
+Please report any issues to [the bug-tracker](https://github.com/ocaml/opam/issues).
+
+Happy hacking!