Hello! It has come to my attention that glaucus Linux is packaging an outdated and vulnerable version of libexpat at: https://github.com/glaucuslinux/core/blob/da19a2ea1c9ebfe6566a96cc2f327d31cad7c466/expat/info#L9 The list of vulnerabilities fixed after 2.7.3 is this: ```console # git diff R_2_7_3 R_2_8_4 -- expat/Changes | grep '^+' | grep -o 'CVE-[0-9-]\+' | sed 's,^,- ,' | sort -u ``` - CVE-2026-24515 - CVE-2026-25210 - CVE-2026-32776 - CVE-2026-32777 - CVE-2026-32778 - CVE-2026-41080 - CVE-2026-45186 - CVE-2026-50219 - CVE-2026-56131 - CVE-2026-56132 - CVE-2026-56403 - CVE-2026-56404 - CVE-2026-56405 - CVE-2026-56406 - CVE-2026-56407 - CVE-2026-56408 - CVE-2026-56409 - CVE-2026-56410 - CVE-2026-56411 - CVE-2026-56412 - CVE-2026-66046 - CVE-2026-72522 - CVE-2026-76641 - CVE-2026-76956 - CVE-2026-76957 Are you aware? Best, Sebastian
Hello!
It has come to my attention that glaucus Linux is packaging an outdated and vulnerable version of libexpat at:
core/expat/info
Line 9 in da19a2e
The list of vulnerabilities fixed after 2.7.3 is this:
# git diff R_2_7_3 R_2_8_4 -- expat/Changes | grep '^+' | grep -o 'CVE-[0-9-]\+' | sed 's,^,- ,' | sort -uAre you aware?
Best, Sebastian