-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 25 May 2026 09:10:59 +0000
Source: beets
Binary: beets beets-doc
Architecture: all
Version: 2.2.0-3+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Pieter Lenaerts <plenae@disroot.org>
Description:
 beets      - music tagger and library organizer
 beets-doc  - music tagger and library organizer - documentation
Closes: 1135779
Changes:
 beets (2.2.0-3+deb13u1) trixie; urgency=medium
 .
   * Add patch to fix xss vulnerability CVE-2026-42052 in web ui
     (Closes: #1135779)
   * Add patch with test for unsafe web ui input
Checksums-Sha1:
 380c4883a88cbbe8b6295bc91189349fc42c0de0 2141620 beets-doc_2.2.0-3+deb13u1_all.deb
 f546a497f431489ef86881241b1b0689ac6cad90 9608 beets_2.2.0-3+deb13u1_all-buildd.buildinfo
 6dbe263ebfa7880841620edf246486fff1e984df 420244 beets_2.2.0-3+deb13u1_all.deb
Checksums-Sha256:
 12552aead45adb57578cace63527bf36b71860266443a179379d3a155a55d3d9 2141620 beets-doc_2.2.0-3+deb13u1_all.deb
 273c7e7ed64004ad621346c062e42f16c866850178ee2becda8df571a20f5da3 9608 beets_2.2.0-3+deb13u1_all-buildd.buildinfo
 e1dd6e8bdb1ad7ea4a9022dba013c87564585064b5af91191cbba576157307db 420244 beets_2.2.0-3+deb13u1_all.deb
Files:
 c0759fdcc05fc029d345db6ccf3c51dc 2141620 doc optional beets-doc_2.2.0-3+deb13u1_all.deb
 0c2e08586f91f357cfa35bd303728df4 9608 sound optional beets_2.2.0-3+deb13u1_all-buildd.buildinfo
 8f989d04ace8161b6441d750192d1c7d 420244 sound optional beets_2.2.0-3+deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=8hhB
-----END PGP SIGNATURE-----