Security Advisory

CVE-2026-21437

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-01 18:06:02

Last updated 2026-01-02 18:54:21

Assigner GitHub_M

State PUBLISHED

Description

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by `eopkg`. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be shown by `lseopkg` and related tools. The issue has been fixed in v4.4.0. Users only installing packages from the Solus repositories are not affected.

← Browse all CVEs View on cve.org ↗