Bug#1102208: libsoup2.4: CVE-2025-2784

[Jeremy Bícha]

On Sun, Apr 6, 2025 at 7:57 AM Salvatore Bonaccorso <carnil at debian.org> wrote:
> Source: libsoup2.4
> Version: 2.74.3-9
> Severity: important
> Tags: security upstream
> Forwarded: https://gitlab.gnome.org/GNOME/libsoup/-/issues/422

If you prepare a Security Update for Debian 12 (or earlier) for
libsoup2.4, could you also include
https://gitlab.gnome.org/GNOME/libsoup/-/commit/2dafd907 from
upstream's libsoup-2-74 branch? Otherwise, the certificate used for
build tests expires in June 2027. You can use
https://bugs.debian.org/1091502 for this issue.

Thank you,
Jeremy Bícha