-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 17 Aug 2026 09:59:20 +0530 Source: calibre Binary: calibre calibre-bin calibre-bin-dbgsym Architecture: source amd64 all Version: 6.13.0+repack-2+deb12u10 Distribution: bookworm-security Urgency: medium Maintainer: Calibre maintainer team <team+calibre@tracker.debian.org> Changed-By: Abhijith PA <abhijith@debian.org> Description: calibre - powerful and easy to use e-book manager calibre-bin - powerful and easy to use e-book manager (binary plugins) Changes: calibre (6.13.0+repack-2+deb12u10) bookworm-security; urgency=medium . [ Abhijith PA ] * Non-maintainer upload by the Debian LTS team . [ YOKOTA Hiroshi ] * This update adds fixup for CVE-2026-25636 patch in 6.13.0+repack-2+deb12u6 . * Update Debian branch name for bookworm * Add test for reproduce Debian bug 1143484 * CVE-2026-25636 (1/2): EPUB Input: Ensure font obfuscation processing happens only on files from the EPUB * Rename a CVE-2026-25636 patch in 6.13.0+repack-2+deb12u6 * Renumber patches * CVE-2026-53511: Disallow Python templates when reading book metadata Checksums-Sha1: d0d02046ed835f8ec0ef6071d107a37cf5c8c348 4418 calibre_6.13.0+repack-2+deb12u10.dsc 5444e12a56fdaa5aa7fc34f13866442c50edaa74 51566212 calibre_6.13.0+repack.orig-hyphenation-git.tar.xz 69f058af21189e5c7425706423d42967c0a754d6 1608516 calibre_6.13.0+repack.orig-mathjax-git.tar.xz e62d20901f9bfb1ba9d4ebcfa49ef652d29fdd8e 10217880 calibre_6.13.0+repack.orig-translations-git.tar.xz 00034590d6567019f4e4376681c8eb69caa7fa22 22780708 calibre_6.13.0+repack.orig.tar.xz a39e0b945b7c7f95d3f6ff4cd26bcc9fc0d50750 571120 calibre_6.13.0+repack-2+deb12u10.debian.tar.xz 666efbebce6f1929cc1c734c0f03b49190e81ca0 4542616 calibre-bin-dbgsym_6.13.0+repack-2+deb12u10_amd64.deb 385d3cb9300096ed64c75f31560e9fb7c00f5641 851880 calibre-bin_6.13.0+repack-2+deb12u10_amd64.deb fcd78792553aaaef61427eac9fa7859fbf803dbc 28873392 calibre_6.13.0+repack-2+deb12u10_all.deb 2280284b923d1e000c3c0914d45f30e4dd8742c0 19075 calibre_6.13.0+repack-2+deb12u10_amd64.buildinfo Checksums-Sha256: f43970a34644158a1fc38ea6867335f5c9c88d8694de62688873f91efb7745aa 4418 calibre_6.13.0+repack-2+deb12u10.dsc 332d9a18d1970556d51842ae34f984f4c75d845410821a71bf1312ca8c075696 51566212 calibre_6.13.0+repack.orig-hyphenation-git.tar.xz 47d248b7fadfc10c9df045db01dc9e0195230570e14c595e4dfb1f604bf599a3 1608516 calibre_6.13.0+repack.orig-mathjax-git.tar.xz f5ea8da0d558bdd92f23723657792fae128b84945fcc059f05367dd4356155c5 10217880 calibre_6.13.0+repack.orig-translations-git.tar.xz eb40f34b7106e3f36d37e0b65dacb5cec863665c68fb2350592dbc1ec133aea3 22780708 calibre_6.13.0+repack.orig.tar.xz 530cdc02cce1c475e32f5f3c763a0e057a7af2d19afdd747b7de5571a9d1dc47 571120 calibre_6.13.0+repack-2+deb12u10.debian.tar.xz 3c34960828bdf49fce74ca38549b4e14fdc932d3d9cc4d02c7cb062a7fca2ba5 4542616 calibre-bin-dbgsym_6.13.0+repack-2+deb12u10_amd64.deb a5c69a275abe431d353366e46ae34491686681ec471a7adf7379d038ffbedc4e 851880 calibre-bin_6.13.0+repack-2+deb12u10_amd64.deb 2147531d04a2db377d4a16e23e49fe99f7ac878c8f0c61e77311d71eecfd87d4 28873392 calibre_6.13.0+repack-2+deb12u10_all.deb 35f4e2f3f8adbe653d8a53489dc740321da7cacfb3a4f17104d1ac2d2fe5dbc5 19075 calibre_6.13.0+repack-2+deb12u10_amd64.buildinfo Files: 7e00a23518d7a9deb73b556e68ade37e 4418 text optional calibre_6.13.0+repack-2+deb12u10.dsc 0e41055083ea912f513f968163767b22 51566212 text optional calibre_6.13.0+repack.orig-hyphenation-git.tar.xz c802a3ed51e9912f0d15319fdc6ffa32 1608516 text optional calibre_6.13.0+repack.orig-mathjax-git.tar.xz bc0b7b063e36cc9aea7c77405801d844 10217880 text optional calibre_6.13.0+repack.orig-translations-git.tar.xz 75c75d784a1b0bab916ff7b0355de0dd 22780708 text optional calibre_6.13.0+repack.orig.tar.xz cf94d6a5e339bf0a797c7172b34d9a01 571120 text optional calibre_6.13.0+repack-2+deb12u10.debian.tar.xz c4ca2b9d81210e005743cbde4b649ce6 4542616 debug optional calibre-bin-dbgsym_6.13.0+repack-2+deb12u10_amd64.deb 68dc91db78a4cbcfb50c0a91826b6779 851880 text optional calibre-bin_6.13.0+repack-2+deb12u10_amd64.deb 1c6fe3c38e84bfde860fdd326911f557 28873392 text optional calibre_6.13.0+repack-2+deb12u10_all.deb 57f6b29c97c16d7c536180ac3c11d43a 19075 text optional calibre_6.13.0+repack-2+deb12u10_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEE7xPqJqaY/zX9fJAuhj1N8u2cKO8FAmqD6egUHGFiaGlqaXRo QGRlYmlhbi5vcmcACgkQhj1N8u2cKO9O8w//fd+h7raxfrtdbdgtq4SoG8Kjvdww 2AjJWj11FIVfnv2MgQvZvJZJNJIiz1bxbsoxIYCc86dpLKntUYKcJvDAVdzyyoi8 OloTejT5oH91p7Ywj9DnpZy3uQj4C7qBvG2Wbz8sWtRB/inp7YnJMqTH12hlojA+ 5KBRCIkhb1iZcwWPp1TEn1g6qngWHpF3hll7b/Aj/bO+99XOK1adQGjodTiOP4bT yxgV3RMNJaUJFaJBtrwrzzSm3hxtek9P7CV1BUKCh9Jf95nZQldeFjNwUs7gWB89 gKNHI7ldVquEVKjl1J4cPO2F1Mx2LaNaF9KLT0Ms5r+5G8unJfcF3NVTsMTxJnpV JyuNShfhCeowILy5pqd6ZJtniSQN1yddOp2Jr1Y/ZLpG90A1RMaQZRmM92NlFEkx 1zsEnw5ZdmDjv+gmvZagv4OforM8rvZtdKWWqLFZsr80u9UR7vV1XuJJRNe90lSs oJUq2mRVcdyLZXADev9AxNZmcB6XekP7CUsPjRq7H8NSDK/d7nOhKmnxvI29aW5d 6mtPK9P9BjikJ0+BTkAxNvsOBFN3ecYfDdtyDWL7UpeuSEu+oFlIo2OJziOJC1wT xky8VFl4iURcztra3XPS4AOBPqY1jVz+41xgl715oOTDpZrj0+MZdoR+WQ0toFpW J7NrvXsUFP+c59g= =O8Qs -----END PGP SIGNATURE-----