Hello Marco, > ebook-convert fails on every EPUB that uses font obfuscation and reports the > file as DRM-protected, although such files carry no DRM. The cause is a > NameError for is_existing_subpath in > calibre/ebooks/conversion/plugins/epub_input.py. > > The affected code is the guard added for CVE-2026-25636. Its call site is > present in this package, but neither the import nor the two helper functions > it depends on are, so the guard raises NameError every time it is reached.
I add fixup to calibre and send bug report to release team. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1143581 > Other suites > ------------ > The same CVE fix was backported to bullseye (5.12.0+dfsg-1+deb11u5) and > bookworm (6.13.0+repack-2+deb12u9). I have not checked whether those packages > carry the same omission; it seems worth verifying. Unstable ships calibre > 9.12.0+ds+~0.10.6-1, which contains the complete upstream fix (released > upstream in 9.2.0) and is not affected. I was send a fixup mail to LTS team for bookworm package. bullseye package was already fixed this issue. -- YOKOTA Hiroshi
