Bug#1104717: libsoup2.4 2.74.3-1+deb12u1: CVE-2025-32911

[Naaz, Syeda Shagufta]

Source: libsoup2.4
Version: 2.74.3-1+deb12u1
Severity: important
Tags: bookworm security
CVE-ID: CVE-2025-32911

Hi,

I am reaching out to inquire about the availability of a fix for CVE-2025-32911<https://security-tracker.debian.org/tracker/CVE-2025-32911>, as it is a critical vulnerability. We are currently in the process of maintaining and securing our Bookworm-based product, and this CVE presents a significant concern for us. We understand that it has already been fixed in Bullseye and Sid.

Could you kindly provide an estimated timeline for when a fix will be available for Bookworm or any additional details regarding the resolution of this issue? Given the nature of the vulnerability, timely remediation is crucial to maintaining the security and stability of our system.

We would appreciate your prompt response and guidance on how we can mitigate or address the issue in the meantime.

Thank you for your attention to this matter.

We greatly appreciate your ongoing efforts to support the security of Debian-based systems.

Regards,
Syeda Shagufta Naaz

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnome-maintainers/attachments/20250505/bf323e05/attachment-0001.htm>