Control: tags -1 + moreinfo Hi,
On Sat, May 09, 2026 at 04:46:21AM +0900, YOKOTA Hiroshi wrote: > Package: release.debian.org > Severity: normal > Tags: trixie > X-Debbugs-Cc: [email protected], [email protected] > Control: affects -1 + src:calibre > User: [email protected] > Usertags: pu > > [ Reason ] > Fix Debian bug 1135543: > calibre: upstream 9.8 contains unannounced security fixes > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1135543 That should IMHO get its metadata fixed, that is get the bug fixed in 9.8.0+ds+~0.10.5-1 and so add a founds version in an anchor of the trixie version. Can you ask upstream if they will publish a GHSA for both issues eparately and request CVEs? Regards, Salvatore

