Hi Aron and XML/SGML Group team, Any news on this one? It would really be great to see an 2.9.4 version of libxml2 to fix as well the least outstanding known CVE (which is marked as no-dsa for stable). Regards, Salvatore