Moritz, the package is orphaned, the only open issues are those filed by yourself. Please just do a QA upload, or package the 2.1beta3 release. A patch for the most recent CVE can be found at http://launchpadlibrarian.net/96838022/expat_2.0.1-7.2_2.0.1-7.2ubuntu1.diff.gz Thanks, Matthias