Bug#1103515: libsoup2.4: CVE-2025-32911 CVE-2025-32913

[Jeremy Bícha]

On Wed, May 14, 2025 at 12:48 PM Simon McVittie <smcv at debian.org> wrote:
> Sean, if you can, please push any subsequent work on libsoup2.4 to the
> relevant branches at https://salsa.debian.org/gnome-team/libsoup at the
> time that it's finalized/tagged/uploaded. (If you don't have access, I
> can add you, but I think DDs might have access to gnome-team
> repositories anyway?)

We haven't given the Debian group push access to the gnome-team yet.
It's been an unwritten policy that we generally give DDs access to the
gnome-team if they request it and seem to know what they're doing. So
it's up to Sean whether he would prefer to have access to the whole
group or we can give him access to specific packages if he prefers
(libsoup2.4, libsoup3, etc.)

It's on our backlog to document a policy for joining the Debian GNOME
team / getting push access to our repos.

Thank you,
Jeremy Bícha