<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-IN" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Package: libxml2<o:p></o:p></p>
<p class="MsoNormal">Severity: normal<o:p></o:p></p>
<p class="MsoNormal">User: Hemlata.Chandewar@ibm.com<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hi,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">This is regarding to the following vulnerability published for libxml2.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><a href="https://security-tracker.debian.org/tracker/CVE-2025-27113"><b>CVE-2025-27113</b></a>[0]:<o:p></o:p></p>
<p class="MsoNormal">| libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer<o:p></o:p></p>
<p class="MsoNormal">| dereference in xmlPatMatch in pattern.c.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">This vulnerability has been addressed in the bullseye release, but since it pertains to an older version, we would like to inquire when it will be fixed in the upcoming sid, Trixie releases.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="571" style="width:428.6pt;border-collapse:collapse">
<tbody>
<tr style="height:2.3pt">
<td valign="top" style="border:solid #DDDDDD 1.0pt;border-right:none;background:#EEEEEE;padding:6.0pt 6.0pt 6.0pt 6.0pt;height:2.3pt">
<p class="MsoNormal"><b><span style="color:black">Source Package</span><o:p></o:p></b></p>
</td>
<td valign="top" style="border-top:solid #DDDDDD 1.0pt;border-left:none;border-bottom:solid #DDDDDD 1.0pt;border-right:none;background:#EEEEEE;padding:6.0pt 6.0pt 6.0pt 6.0pt;height:2.3pt">
<p class="MsoNormal"><b><span style="color:black">Release</span><o:p></o:p></b></p>
</td>
<td valign="top" style="border-top:solid #DDDDDD 1.0pt;border-left:none;border-bottom:solid #DDDDDD 1.0pt;border-right:none;background:#EEEEEE;padding:6.0pt 6.0pt 6.0pt 6.0pt;height:2.3pt">
<p class="MsoNormal"><b><span style="color:black">Version</span><o:p></o:p></b></p>
</td>
<td valign="top" style="border:solid #DDDDDD 1.0pt;border-left:none;background:#EEEEEE;padding:6.0pt 6.0pt 6.0pt 6.0pt;height:2.3pt">
<p class="MsoNormal"><b><span style="color:black">Status</span><o:p></o:p></b></p>
</td>
</tr>
<tr style="height:2.35pt">
<td valign="top" style="border-top:none;border-left:solid #DDDDDD 1.0pt;border-bottom:solid #DDDDDD 1.0pt;border-right:none;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:2.35pt">
<p class="MsoNormal"><a href="https://security-tracker.debian.org/tracker/source-package/libxml2">libxml2</a> (<a href="https://tracker.debian.org/pkg/libxml2">PTS</a>)<o:p></o:p></p>
</td>
<td valign="top" style="border:none;border-bottom:solid #DDDDDD 1.0pt;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:2.35pt">
<p class="MsoNormal">bullseye<o:p></o:p></p>
</td>
<td valign="top" style="border:none;border-bottom:solid #DDDDDD 1.0pt;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:2.35pt">
<p class="MsoNormal">2.9.10+dfsg-6.7+deb11u4<o:p></o:p></p>
</td>
<td valign="top" style="border-top:none;border-left:none;border-bottom:solid #DDDDDD 1.0pt;border-right:solid #DDDDDD 1.0pt;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:2.35pt">
<p class="MsoNormal">vulnerable<o:p></o:p></p>
</td>
</tr>
<tr style="height:2.3pt">
<td valign="top" style="border-top:none;border-left:solid #DDDDDD 1.0pt;border-bottom:solid #DDDDDD 1.0pt;border-right:none;background:#FAFAFA;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:2.3pt">
</td>
<td valign="top" style="border:none;border-bottom:solid #DDDDDD 1.0pt;background:#FAFAFA;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:2.3pt">
<p class="MsoNormal"><span style="color:black">bullseye (security)</span><o:p></o:p></p>
</td>
<td valign="top" style="border:none;border-bottom:solid #DDDDDD 1.0pt;background:#FAFAFA;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:2.3pt">
<p class="MsoNormal"><span style="color:black">2.9.10+dfsg-6.7+deb11u6</span><o:p></o:p></p>
</td>
<td valign="top" style="border-top:none;border-left:none;border-bottom:solid #DDDDDD 1.0pt;border-right:solid #DDDDDD 1.0pt;background:#FAFAFA;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:2.3pt">
<p class="MsoNormal"><span style="color:black">fixed</span><o:p></o:p></p>
</td>
</tr>
<tr style="height:2.35pt">
<td valign="top" style="border-top:none;border-left:solid #DDDDDD 1.0pt;border-bottom:solid #DDDDDD 1.0pt;border-right:none;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:2.35pt">
</td>
<td valign="top" style="border:none;border-bottom:solid #DDDDDD 1.0pt;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:2.35pt">
<p class="MsoNormal">bookworm<o:p></o:p></p>
</td>
<td valign="top" style="border:none;border-bottom:solid #DDDDDD 1.0pt;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:2.35pt">
<p class="MsoNormal">2.9.14+dfsg-1.3~deb12u1<o:p></o:p></p>
</td>
<td valign="top" style="border-top:none;border-left:none;border-bottom:solid #DDDDDD 1.0pt;border-right:solid #DDDDDD 1.0pt;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:2.35pt">
<p class="MsoNormal">vulnerable<o:p></o:p></p>
</td>
</tr>
<tr style="height:2.3pt">
<td valign="top" style="background:#FAFAFA;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:2.3pt">
</td>
<td valign="top" style="background:#FAFAFA;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:2.3pt">
<p class="MsoNormal"><span style="color:black">sid, trixie</span><o:p></o:p></p>
</td>
<td valign="top" style="background:#FAFAFA;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:2.3pt">
<p class="MsoNormal"><span style="color:black">2.12.7+dfsg+really2.9.14-0.2</span><o:p></o:p></p>
</td>
<td valign="top" style="background:#FAFAFA;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:2.3pt">
<p class="MsoNormal"><span style="color:black">vulnerable</span><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Looking forward to your response.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Best regards,<o:p></o:p></p>
<p class="MsoNormal">Hemlata Chandewar<o:p></o:p></p>
</div>
</body>
</html>