Debian Bug report logs - #873660
calibre: uses outdated mspack with security problems

Package: calibre; Maintainer for calibre is Calibre maintainer team <team+calibre@tracker.debian.org>; Source for calibre is src:calibre (PTS, buildd, popcon).

Reported by: Jonatan Nyberg <jonatan@autistici.org>

Date: Tue, 29 Aug 2017 20:45:04 UTC

Severity: important

Done: Norbert Preining <norbert@preining.info>

Bug is archived. No further changes may be made.

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, Miriam Ruiz <little_miry@yahoo.es>:
Bug#873660; Package calibre. (Tue, 29 Aug 2017 20:45:06 GMT) (full text, mbox, link).

Acknowledgement sent to Jonatan Nyberg <jonatan@autistici.org>:
New Bug report received and forwarded. Copy sent to Miriam Ruiz <little_miry@yahoo.es>. (Tue, 29 Aug 2017 20:45:06 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Jonatan Nyberg <jonatan@autistici.org>
To: submit@bugs.debian.org
Subject: calibre: uses outdated mspack with security problems
Date: Tue, 29 Aug 2017 22:43:42 +0200
Package: calibre
severity: important

Dear Maintainer,

Kovid Goyal just fixed some sexurity bugs. It is important to update
calibre as soon as possible.

Links:
https://bugs.launchpad.net/calibre/+bug/1713716
https://github.com/kovidgoyal/calibre/commit/181f5952949156812285d47a03
07e482619cf7d0

Kind regards,
Jonatan

Marked Bug as done Request was from Norbert Preining <norbert@preining.info> to control@bugs.debian.org. (Mon, 25 Sep 2017 00:45:12 GMT) (full text, mbox, link).

Notification sent to Jonatan Nyberg <jonatan@autistici.org>:
Bug acknowledged by developer. (Mon, 25 Sep 2017 00:45:13 GMT) (full text, mbox, link).

Information forwarded to debian-bugs-dist@lists.debian.org, Miriam Ruiz <little_miry@yahoo.es>:
Bug#873660; Package calibre. (Mon, 25 Sep 2017 00:54:05 GMT) (full text, mbox, link).

Acknowledgement sent to Norbert Preining <norbert@preining.info>:
Extra info received and forwarded to list. Copy sent to Miriam Ruiz <little_miry@yahoo.es>. (Mon, 25 Sep 2017 00:54:05 GMT) (full text, mbox, link).

Message #14 received at 873660@bugs.debian.org (full text, mbox, reply):

From: Norbert Preining <norbert@preining.info>
To: 873660@bugs.debian.org
Subject: CLosing this bug
Date: Mon, 25 Sep 2017 09:43:58 +0900
close 873660
force-merge 873660 872595
thanks

The commit was already cherry-picked for 3.7.0+dfsg-1, closing this bug.

Norbert

--
PREINING Norbert                               http://www.preining.info
Accelia Inc.     +    JAIST     +    TeX Live     +    Debian Developer
GPG: 0x860CDC13   fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Mon, 23 Oct 2017 07:29:31 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Thu Nov 21 22:33:26 2024; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.