-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-a455bea9ca 2024-08-27 17:07:11.621204 -------------------------------------------------------------------------------- Name : calibre Product : Fedora 40 Version : 7.17.0 Release : 3.fc40 URL : https://calibre-ebook.com/ Summary : E-book converter and library manager Description : Calibre is meant to be a complete e-library solution. It includes library management, format conversion, news feeds to ebook conversion as well as e-book reader sync features. Calibre is primarily a ebook cataloging program. It manages your ebook collection for you. It is designed around the concept of the logical book, i.e. a single entry in the database that may correspond to ebooks in several formats. It also supports conversion to and from a dozen different ebook formats. Supported input formats are: MOBI, LIT, PRC, EPUB, CHM, ODT, HTML, CBR, CBZ, RTF, TXT, PDF and LRS. -------------------------------------------------------------------------------- Update Information: Fix fonts for < f41 releases. Upgrade to latest upstream release to fix 4 CVE's and enable new hardware -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 25 2024 Kevin Fenzi <kevin@xxxxxxxxx> - 7.17.0-2 - Fix font conditionals to handle f40 and older correctly * Sat Aug 24 2024 Kevin Fenzi <kevin@xxxxxxxxx> - 7.17.0-1 - Update to 7.17.0. Fixes rhbz#2307557 * Wed Aug 21 2024 Parag Nemade <pnemade@xxxxxxxxxxxxxxxxx> - 7.16.0-3 - Update to use new Liberation fonts installation path for F41+ releases. * Thu Aug 15 2024 Kevin Fenzi <kevin@xxxxxxxxx> - 7.16.0-2 - Remove pycryptdome as a BuildRequires * Sun Aug 4 2024 Kevin Fenzi <kevin@xxxxxxxxx> - 7.16.0-1 - Update to calibre 7.16.0. Fixes rhbz#2302040 * Sat Jul 20 2024 Kevin Fenzi <kevin@xxxxxxxxx> - 7.15.0-1 - Update to 7.15.0. Fixes rhbz#2298824 * Wed Jul 17 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 7.14.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Sat Jul 13 2024 Kevin Fenzi <kevin@xxxxxxxxx> - 7.14.0-1 - Update to 7.14.0. Fixes rhbz#2297462 * Sun Jul 7 2024 Kevin Fenzi <kevin@xxxxxxxxx> - 7.13.0-2 - correct path for liberation fonts -------------------------------------------------------------------------------- References: [ 1 ] Bug #2303060 - CVE-2024-7009 calibre: From NVD collector [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2303060 [ 2 ] Bug #2303063 - CVE-2024-7008 calibre: Unsanitized user-input in Calibre allow attackers to perform reflected cross-site scripting [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2303063 [ 3 ] Bug #2303065 - CVE-2024-6782 calibre: Improper access control in Calibre allow unauthenticated attackers to achieve remote code execution. [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2303065 [ 4 ] Bug #2303067 - CVE-2024-6781 calibre: Path traversal in Calibre allow unauthenticated attackers to achieve arbitrary file read. [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2303067 [ 5 ] Bug #2307794 - Crash at start of "calibre" https://bugzilla.redhat.com/show_bug.cgi?id=2307794 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-a455bea9ca' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- package-announce@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-announce-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
