-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-c10ed2f3b7 2026-08-22 01:12:20.657992+00:00 --------------------------------------------------------------------------------
Name : calibre Product : Fedora 43 Version : 9.13.0 Release : 1.fc43 URL : https://calibre-ebook.com/ Summary : E-book converter and library manager Description : Calibre is meant to be a complete e-library solution. It includes library management, format conversion, news feeds to ebook conversion as well as e-book reader sync features. Calibre is primarily a ebook cataloging program. It manages your ebook collection for you. It is designed around the concept of the logical book, i.e. a single entry in the database that may correspond to ebooks in several formats. It also supports conversion to and from a dozen different ebook formats. Supported input formats are: MOBI, LIT, PRC, EPUB, CHM, ODT, HTML, CBR, CBZ, RTF, TXT, PDF and LRS. -------------------------------------------------------------------------------- Update Information: Update to 9.13.0. -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 16 2026 Kevin Fenzi <[email protected]> - 9.13.0-1 - Update to 9.13.0. Fixes rhbz#2512403 * Sat Aug 1 2026 Kevin Fenzi <[email protected]> - 9.12.0-1 - Update to 9.12.0. Fixes rhbz#2509661 * Wed Jul 22 2026 Python Maint <[email protected]> - 9.11.0-5 - Rebuilt for Python 3.15.0b4 ABI change * Mon Jul 20 2026 Kevin Fenzi <[email protected]> - 9.11.0-4 - Rebuild again for onnxruntime * Wed Jul 15 2026 Fedora Release Engineering <[email protected]> - 9.11.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Wed Jul 15 2026 Carl George <[email protected]> - 9.11.0-2 - Rebuild for libonnxruntime.so.1(VERS_1.26.0) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2421314 - CVE-2025-65858 calibre: Calibre-Web: Stored Cross-Site Scripting (XSS) vulnerability in username field [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2421314 [ 2 ] Bug #2437960 - CVE-2026-25636 calibre: Calibre: Arbitrary file corruption via path traversal in EPUB conversion [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2437960 [ 3 ] Bug #2514485 - CVE-2026-73248 calibre: calibre: Remote Code Execution via Python template restrictions bypass [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2514485 [ 4 ] Bug #2514486 - CVE-2026-73249 calibre: Calibre Content Server: Unauthorized book annotation modification via missing authorization check [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2514486 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-c10ed2f3b7' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
