Hi Pieter,
On 20/05/2026 21:46, Pieter Lenaerts wrote:
Dear Debian Release team,
I'm trying to get a CVE fixed for package beets in trixie and bookworm.
Is there anything that I should do for pu bugs #1136745 and #1136681?
First time in this process.
I'm not a DD, will someone from the release team upload or should I find a DD?
Thanks for helping me out.
You should find a sponsor to upload them. Since the changes are small and
targeted, and they look reasonable to me (at least the trixie debdiff does), I'd
advise to have the sponsor upload right away to save a round trip. See [1].
Also, be patient with these bugs. The last point releases have just happened,
and usually proposed-updates bugs are processed in batches, so it may be a few
days or weeks before they are looked at.
Cheers,
Emilio
[1] https://lists.debian.org/debian-devel-announce/2025/08/msg00003.html
