-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 15 Jun 2026 07:53:34 +0200 Source: beets Architecture: source Version: 1.4.9-7+deb11u1 Distribution: bullseye-security Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Pieter Lenaerts <plenae@disroot.org> Closes: 1135779 Changes: beets (1.4.9-7+deb11u1) bullseye-security; urgency=medium . * Add patches for CVE-2026-42052 to bullseye (Closes: #1135779) * Mark patch as backported fix_xss_by_using_escaped_template_tags_in_web_ui * Enable salsa for bullseye * Switch to bullseye lts salsa-ci.yml * Debian control updates for lintian: * Switch old PAPT team to python team * Update VCS url's * Add self to uploaders Checksums-Sha1: 476c653afc3556b2292b9d93f063e90e39fdd45b 2401 beets_1.4.9-7+deb11u1.dsc b23d8549673a54e244174dc8c406671f96d3a665 1494459 beets_1.4.9.orig.tar.gz 006bd5fec15326386a91f5948d4d24705212a16b 14328 beets_1.4.9-7+deb11u1.debian.tar.xz 95e91f8a30bae48b503cb70292c0013ec8b0915f 9561 beets_1.4.9-7+deb11u1_source.buildinfo Checksums-Sha256: b309cefc33bb2d2d05c27fea547e42fe2a024e7e98dd726229d069c02a811e1e 2401 beets_1.4.9-7+deb11u1.dsc d29b432cab0c80947b5229f548762948c4dd4a430e5d02760bfeb95da3cc8054 1494459 beets_1.4.9.orig.tar.gz ad09bb02197df24024c5b1361da192def0f88d911780a1b31df62e657436ea7a 14328 beets_1.4.9-7+deb11u1.debian.tar.xz 3d15740ac72aefd3cdbf4c3e81cdf7c8b603058d1611c6d39f54e8dd4519f7e6 9561 beets_1.4.9-7+deb11u1_source.buildinfo Files: 09e8aadf623ee5cfb3ec8a9c083b005e 2401 sound optional beets_1.4.9-7+deb11u1.dsc 1218fb28fc270f59a6054135099a69f1 1494459 sound optional beets_1.4.9.orig.tar.gz d5f22633295ebcc0aa172af40a909cea 14328 sound optional beets_1.4.9-7+deb11u1.debian.tar.xz d5b8b8aef28e8b33a1c2ad2d81cda5cb 9561 sound optional beets_1.4.9-7+deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEEE3lnVbvHK7ir4q61+p3sXeEcY/EFAmo3CaASHGVhbWFudUBk ZWJpYW4ub3JnAAoJEPqd7F3hHGPxU24QAL2p/bLlx10cNPugwB2i3qz4GD7d4Xy0 9FgpTPLJkSOCPUuJ/6BkrrsDT3viskg5lKTRFMkZRVjTPW0uxv2Fytl4ZVZ10GmB mpMywqY323to3iGGytrMAIMYvvsA6JcELPgJgnMEDoxxgfqgwpD9fzdceotzz8d3 +bJP0W/xm7t4pEeQh6fWajP4AoQDYhUXJAp/It8wPGusZXDZAk3gh7/zs9wVjXja WuYFtgetdhz8soaFK8YpS7xW7qLD03DPMmNdoWv3IR7l6wcZr+mLW0T7vWlmHUW1 Um9GP+NGnd9fQ77FDppiyVz2cksb6aQonS+GbgzPazaysLjvgHZi2TnsDj+W8F3S /JlpclpU3M7yLQ/9jCFbMNkXtLY6JgZE6UymY1ZIpfxBdDrHm2ecKRXSDGKlVdOu nAFyBINKZJBRRaB065/6Rje/+zyMrzF0DFGLdnT0XmH3qTVOBcyY8VPmor/bo12j G8Tpq656Js9Ecx2wuhEzX9XJzziX7Fi7k2vhEy9JsCy22xNuxvdJyVtizCmL7Jto zkA4+/++52MBqQld4yZIj59USkjk6DhZSwPFlCAqHaIRO0K2iD036U9C+t8CMuY/ 0HfThPBGXrmRGRNaT8kIL1oAGw+9CXLLZgFiTUZcUrrq0K66WIxBpm/eTcjebEye OatCbhvo5RWx =+WqL -----END PGP SIGNATURE-----
