https://bugzilla.suse.com/show_bug.cgi?id=1232612 https://bugzilla.suse.com/show_bug.cgi?id=1232612#c1 --- Comment #1 from Andrea Mattiazzo <andrea.mattiazzo@suse.com> --- The packages below are or contain embedded packages that are vulnerable to CVE-2024-50602. Tracking as affected: - openSUSE:Factory/Coin contains embedded package: libexpat (R_2_0_0-42-g56e145f) - openSUSE:Factory/Coin4 contains embedded package: libexpat (R_2_2_9-130-g3af8f46) Please consider version bumping or patching the affected dependencies. The listed codestreams are affected. All other codestreams should not be affected, but feel free to double-check. This is a auto-generated message, please reach out to the reporter directly if you think this is incorrect. No bug-owner found for these packages, if the assignation is not correct feel free to re-assign. -- You are receiving this mail because: You are on the CC list for the bug.