Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Debian 11 Bullseye DLA-3862-1: Calibre Moderate Denial Of Service

debian lts
Calendar Grey September 2, 2024
Dist Debian Esm H88
Calibre e-book manager has resolved two security issues, one of which could lead to denial of service. Ensure you update to version 5.12.0+dfsg-1+deb11u3 for the patch.
Two vulnerabilities have been fixed in the e-book manager Calibre

Summary

CVE-2021-44686

Regular Expression Denial of Service

CVE-2023-46303

HTML Input: Don't add resources that exist outside the document root
by default

For Debian 11 bullseye, these problems have been fixed in version
5.12.0+dfsg-1+deb11u3.

We recommend that you upgrade your calibre packages.

For the detailed security status of calibre please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/calibre

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Package: calibre
Version: 5.12.0+dfsg-1+deb11u3
CVE ID: CVE-2021-44686 CVE-2023-46303
Debian Bug:

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here