Bug#1103515: libsoup2.4: CVE-2025-32911 CVE-2025-32913

[Simon McVittie]

On Sat, 17 May 2025 at 09:29:56 +0100, Sean Whitton wrote:
>On Wed 14 May 2025 at 11:45am +01, Simon McVittie wrote:
>>
>> Sean, if you can, please push any subsequent work on libsoup2.4 to the
>> relevant branches at https://salsa.debian.org/gnome-team/libsoup at the time
>> that it's finalized/tagged/uploaded. (If you don't have access, I can add you,
>> but I think DDs might have access to gnome-team repositories anyway?)
>
>Simon, I have generally been making MRs for my updates but it would seem
>that I missed some of them.  I would be grateful for gnome-team
>membership so that I can be sure to push everything.

I can't add you to the team - sorry, I thought I could, but I'd lost 
track of which groups I'm an Owner in. Instead I've added you to 
gnome-team/libsoup (which contains source package libsoup2.4) and 
gnome-team/libsoup3. If you'll be working on other GNOMEish libraries 
for LTS, for example GLib or GTK, I can add you to those too, or perhaps 
an Owner can give you access to the group as a whole.

If you have work-in-progress that you want to track, our convention is 
to push branches in the wip/ namespace, like maybe 
wip/spwhitton/sometopic (or you can push to a fork, either works). Merge 
requests also welcome, please mark them as Draft if they aren't ready 
to land just yet.

At the point where you're ready to upload, please push to the 
appropriate branch - there's no point in having merge requests to review 
things that, from the archive point of view, have already happened.

Thanks,
     smcv