<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1250">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
@font-face
{font-family:"Lucida Grande";
panose-1:2 11 6 0 4 5 2 2 2 4;}
@font-face
{font-family:"Helvetica Neue";
panose-1:2 0 5 3 0 0 0 2 0 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="en-PL" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;mso-fareast-language:EN-US">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;mso-fareast-language:EN-US">I did this research and the reason that I’m writing to you is that for all listed CVE I found status “</span><span style="font-size:10.5pt;font-family:"Helvetica Neue";color:red;background:#FAFAFA">vulnerable</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Helvetica Neue";color:red;background:#FAFAFA">”
</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Helvetica Neue";color:black;background:#FAFAFA">where fix is not available.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Helvetica Neue";color:black;background:#FAFAFA">Can you estimate date of providing fix for those issues?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Helvetica Neue";color:black;background:#FAFAFA"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div>
<p class="MsoNormal" style="margin-left:.6pt"><b><span style="font-size:7.5pt;font-family:"Lucida Grande",sans-serif;color:#212121">Radosław (Radek) Chmielewski</span></b><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.6pt"><span style="font-size:7.5pt;font-family:"Lucida Grande",sans-serif;color:#212121">Global IT Client Service Manager</span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.6pt"><span style="font-size:7.5pt;font-family:"Lucida Grande",sans-serif;color:#212121">IBM Global Process Services</span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.6pt"><span style="font-size:7.5pt;font-family:"Lucida Grande",sans-serif;color:#212121">+48 661 9784446</span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.6pt"><span style="font-size:7.5pt;font-family:"Lucida Grande",sans-serif;color:#212121"><a href="mailto:Radoslaw.Chmielewski@pl.ibm.com"><span style="color:#0078D7">Radoslaw.Chmielewski@pl.ibm.com</span></a></span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.6pt"><span style="font-size:7.5pt;font-family:"Lucida Grande",sans-serif;color:#212121"> </span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.6pt"><span style="font-size:7.5pt;font-family:"Lucida Grande",sans-serif;color:#212121">IBM BTO Business Consulting Services Sp. z o.o. </span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.6pt"><span style="font-size:7.5pt;font-family:"Lucida Grande",sans-serif;color:#212121">ul. Armii Krajowej 16, 30-150 Kraków </span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.6pt"><span style="font-size:7.5pt;font-family:"Lucida Grande",sans-serif;color:#212121">NIP: 677-216-02-67 </span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.6pt"><span style="font-size:7.5pt;font-family:"Lucida Grande",sans-serif;color:#212121">Sąd Rejonowy dla Krakowa-Śródmieścia w Krakowie, </span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.6pt"><span style="font-size:7.5pt;font-family:"Lucida Grande",sans-serif;color:#212121">XI WydziałGospodarczy KRS </span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#212121"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:"Lucida Grande",sans-serif;color:#212121">Nr KRS: 0000115809, Kapitałzakładowy: 210.000 PLN</span><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:#212121"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div id="mail-editor-reference-message-container">
<div>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="color:black">From:
</span></b><span style="color:black">David Bremner <david@tethera.net><br>
<b>Date: </b>Tuesday, 7 January 2025 at 20:54<br>
<b>To: </b>Radoslaw Chmielewski <Radoslaw.Chmielewski@pl.ibm.com>, pkg-phototools-devel@lists.alioth.debian.org <pkg-phototools-devel@lists.alioth.debian.org><br>
<b>Subject: </b>[EXTERNAL] Re: Fix date - CVE-2021-3575, CVE-2023-39327, CVE-2023-39328, CVE-2023-39329, CVE-2023-5841, CVE-2024-31047<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt">Radoslaw Chmielewski <Radoslaw.Chmielewski@pl.ibm.com> writes:<br>
<br>
> Hi,<br>
><br>
> Can you advice when we can expect fix an issue linked to CVE-2021-3575, CVE-2023-39327, CVE-2023-39328, CVE-2023-39329, CVE-2023-5841, CVE-2024-31047?<br>
><br>
> Thank you for your response in advance.<br>
<br>
I suggest you start your investigation with the security tracker.<br>
<br>
<a href="https://security-tracker.debian.org/tracker">
https://urldefense.proofpoint.com/v2/url?u=https-3A__security-2Dtracker.debian.org_tracker&d=DwIBAg&c=BSDicqBQBDjDI9RkVyTcHQ&r=bruAEIs8vZP8uLo79SNy8fmPFsZsDyVYmTCUJD5zBqU&m=tqJtCHJr3VRV0sNlwFE3klPTQJHKjPfp3JtrWWxRC3W5B1_J-Ven1FI13bBctZah&s=5qMIk5nxiNMqF1z2_Vm7QRF489_Xi1Jum0TESmL3hjY&e=</a>
<br>
<br>
If you have further questions, probably following up to the individual<br>
bugs linked from security tracker pages is the most useful thing to<br>
do.<br>
<br>
Debian is a volunteer driven project, so it's unlikely anyone will be<br>
able to commit to a schedule for you. If these particular bugs are<br>
important for your business, we are always looking volunteers to help<br>
with package maintenance.<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</body>
</html>