<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:927301382;
mso-list-template-ids:-1350162640;}
@list l0:level1
{mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level2
{mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level3
{mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level4
{mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level5
{mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level6
{mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level7
{mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level8
{mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level9
{mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l1
{mso-list-id:1189026313;
mso-list-template-ids:-594138420;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2
{mso-list-id:1556812858;
mso-list-template-ids:1700833556;}
@list l2:level1
{mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l2:level2
{mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l2:level3
{mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l2:level4
{mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l2:level5
{mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l2:level6
{mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l2:level7
{mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l2:level8
{mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l2:level9
{mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l3
{mso-list-id:1642340962;
mso-list-template-ids:-1903412180;}
@list l3:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l3:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-IN" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Package: libxml2<o:p></o:p></p>
<p class="MsoNormal">Severity: CRITICAL and HIGH<o:p></o:p></p>
<p class="MsoNormal">User: <a href="mailto:Hemlata.Chandewar@ibm.com">Hemlata.Chandewar@ibm.com</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hi,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We are writing in reference to the recently published vulnerabilities affecting
<b>libxml2</b>:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">CVE-2025-6021: <a href="https://www.cve.org/CVERecord?id=CVE-2025-6021">
https://www.cve.org/CVERecord?id=CVE-2025-6021</a><o:p></o:p></p>
<p class="MsoNormal">CVE-2025-49794: <a href="https://www.cve.org/CVERecord?id=CVE-2025-49794">
https://www.cve.org/CVERecord?id=CVE-2025-49794</a> <o:p></o:p></p>
<p class="MsoNormal">CVE-2025-49795: <a href="https://www.cve.org/CVERecord?id=CVE-2025-49795">
https://www.cve.org/CVERecord?id=CVE-2025-49795</a><o:p></o:p></p>
<p class="MsoNormal">CVE-2025-49796: <a href="https://www.cve.org/CVERecord?id=CVE-2025-49796">
https://www.cve.org/CVERecord?id=CVE-2025-49796</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">These vulnerabilities appear to affect all currently released versions listed below:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="1" cellspacing="0" cellpadding="0" width="787" style="width:589.95pt;border-collapse:collapse;border:none">
<tbody>
<tr style="height:6.4pt">
<td width="176" valign="top" style="width:132.1pt;border:solid #DDDDDD 1.0pt;border-right:none;background:#EEEEEE;padding:6.0pt 6.0pt 6.0pt 6.0pt;height:6.4pt">
<p class="MsoNormal"><b><span style="color:black">Source Package</span><o:p></o:p></b></p>
</td>
<td width="151" valign="top" style="width:113.45pt;border-top:solid #DDDDDD 1.0pt;border-left:none;border-bottom:solid #DDDDDD 1.0pt;border-right:none;background:#EEEEEE;padding:6.0pt 6.0pt 6.0pt 6.0pt;height:6.4pt">
<p class="MsoNormal"><b><span style="color:black">Release</span><o:p></o:p></b></p>
</td>
<td width="322" valign="top" style="width:241.3pt;border-top:solid #DDDDDD 1.0pt;border-left:none;border-bottom:solid #DDDDDD 1.0pt;border-right:none;background:#EEEEEE;padding:6.0pt 6.0pt 6.0pt 6.0pt;height:6.4pt">
<p class="MsoNormal"><b><span style="color:black">Version</span><o:p></o:p></b></p>
</td>
<td width="137" valign="top" style="width:103.1pt;border:solid #DDDDDD 1.0pt;border-left:none;background:#EEEEEE;padding:6.0pt 6.0pt 6.0pt 6.0pt;height:6.4pt">
<p class="MsoNormal"><b><span style="color:black">Status</span><o:p></o:p></b></p>
</td>
</tr>
<tr style="height:6.6pt">
<td width="176" valign="top" style="width:132.1pt;border-top:none;border-left:solid #DDDDDD 1.0pt;border-bottom:solid #DDDDDD 1.0pt;border-right:none;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.6pt">
<p class="MsoNormal"><a href="https://security-tracker.debian.org/tracker/source-package/libxml2">libxml2</a> (<a href="https://tracker.debian.org/pkg/libxml2">PTS</a>)<o:p></o:p></p>
</td>
<td width="151" valign="top" style="width:113.45pt;border:none;border-bottom:solid #DDDDDD 1.0pt;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.6pt">
<p class="MsoNormal">bullseye<o:p></o:p></p>
</td>
<td width="322" valign="top" style="width:241.3pt;border:none;border-bottom:solid #DDDDDD 1.0pt;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.6pt">
<p class="MsoNormal">2.9.10+dfsg-6.7+deb11u4<o:p></o:p></p>
</td>
<td width="137" valign="top" style="width:103.1pt;border-top:none;border-left:none;border-bottom:solid #DDDDDD 1.0pt;border-right:solid #DDDDDD 1.0pt;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.6pt">
<p class="MsoNormal">vulnerable<o:p></o:p></p>
</td>
</tr>
<tr style="height:6.4pt">
<td width="176" valign="top" style="width:132.1pt;border-top:none;border-left:solid #DDDDDD 1.0pt;border-bottom:solid #DDDDDD 1.0pt;border-right:none;background:#FAFAFA;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.4pt">
</td>
<td width="151" valign="top" style="width:113.45pt;border:none;border-bottom:solid #DDDDDD 1.0pt;background:#FAFAFA;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.4pt">
<p class="MsoNormal"><span style="color:black">bullseye (security)</span><o:p></o:p></p>
</td>
<td width="322" valign="top" style="width:241.3pt;border:none;border-bottom:solid #DDDDDD 1.0pt;background:#FAFAFA;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.4pt">
<p class="MsoNormal"><span style="color:black">2.9.10+dfsg-6.7+deb11u7</span><o:p></o:p></p>
</td>
<td width="137" valign="top" style="width:103.1pt;border-top:none;border-left:none;border-bottom:solid #DDDDDD 1.0pt;border-right:solid #DDDDDD 1.0pt;background:#FAFAFA;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.4pt">
<p class="MsoNormal"><span style="color:black">vulnerable</span><o:p></o:p></p>
</td>
</tr>
<tr style="height:6.6pt">
<td width="176" valign="top" style="width:132.1pt;border-top:none;border-left:solid #DDDDDD 1.0pt;border-bottom:solid #DDDDDD 1.0pt;border-right:none;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.6pt">
</td>
<td width="151" valign="top" style="width:113.45pt;border:none;border-bottom:solid #DDDDDD 1.0pt;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.6pt">
<p class="MsoNormal">bookworm<o:p></o:p></p>
</td>
<td width="322" valign="top" style="width:241.3pt;border:none;border-bottom:solid #DDDDDD 1.0pt;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.6pt">
<p class="MsoNormal">2.9.14+dfsg-1.3~deb12u1<o:p></o:p></p>
</td>
<td width="137" valign="top" style="width:103.1pt;border-top:none;border-left:none;border-bottom:solid #DDDDDD 1.0pt;border-right:solid #DDDDDD 1.0pt;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.6pt">
<p class="MsoNormal">vulnerable<o:p></o:p></p>
</td>
</tr>
<tr style="height:6.4pt">
<td width="176" valign="top" style="width:132.1pt;border-top:none;border-left:solid #DDDDDD 1.0pt;border-bottom:solid #DDDDDD 1.0pt;border-right:none;background:#FAFAFA;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.4pt">
</td>
<td width="151" valign="top" style="width:113.45pt;border:none;border-bottom:solid #DDDDDD 1.0pt;background:#FAFAFA;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.4pt">
<p class="MsoNormal"><span style="color:black">bookworm (security)</span><o:p></o:p></p>
</td>
<td width="322" valign="top" style="width:241.3pt;border:none;border-bottom:solid #DDDDDD 1.0pt;background:#FAFAFA;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.4pt">
<p class="MsoNormal"><span style="color:black">2.9.14+dfsg-1.3~deb12u2</span><o:p></o:p></p>
</td>
<td width="137" valign="top" style="width:103.1pt;border-top:none;border-left:none;border-bottom:solid #DDDDDD 1.0pt;border-right:solid #DDDDDD 1.0pt;background:#FAFAFA;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.4pt">
<p class="MsoNormal"><span style="color:black">vulnerable</span><o:p></o:p></p>
</td>
</tr>
<tr style="height:6.6pt">
<td width="176" valign="top" style="width:132.1pt;border:none;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.6pt">
</td>
<td width="151" valign="top" style="width:113.45pt;border:none;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.6pt">
<p class="MsoNormal">trixie, sid<o:p></o:p></p>
</td>
<td width="322" valign="top" style="width:241.3pt;border:none;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.6pt">
<p class="MsoNormal">2.12.7+dfsg+really2.9.14-1<o:p></o:p></p>
</td>
<td width="137" valign="top" style="width:103.1pt;border:none;padding:3.0pt 6.0pt 3.0pt 6.0pt;height:6.6pt">
<p class="MsoNormal">vulnerable<o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We would appreciate clarification on the following points:<o:p></o:p></p>
<ol style="margin-top:0cm" start="1" type="1">
<li class="MsoNormal" style="mso-list:l2 level1 lfo4"><b>Will these vulnerabilities be fixed in version 2.12.7+dfsg+really2.9.14-1 (Trixie, Sid)? If so, when?</b><o:p></o:p></li><li class="MsoNormal" style="mso-list:l2 level1 lfo4"><b>When is the next version, 2.14.4+dfsg-0exp1 (currently in experimental), expected to become a stable release?</b><o:p></o:p></li><li class="MsoNormal" style="mso-list:l2 level1 lfo4"><b>Will these vulnerabilities be addressed in that next stable release (2.14.x)?</b><o:p></o:p></li></ol>
<p class="MsoNormal" style="margin-left:18.0pt"><o:p> </o:p></p>
<p class="MsoNormal">Thank you for your time and assistance. We look forward to your response.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Best regards,<o:p></o:p></p>
<p class="MsoNormal">Hemlata Chandewar<o:p></o:p></p>
</div>
</body>
</html>