Advisories » MGASA-2017-0047

Updated calibre packages fix security vulnerability

Publication date: 11 Feb 2017
Modification date: 11 Feb 2017
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-10187

Description

Newer devices like Kobo Aura HD requires newer versions of calibre for
their new firmwares. Current calibre package does not support them.

Also, our current calibre packages in both core and backports
repositories have a security issue (CVE-2016-10187). Newer versions of
calibre 2.75.0 + fixes this issue.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=20225
• http://openwall.com/lists/oss-security/2017/01/31/9
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10187

SRPMS

5/core

• calibre-2.78.0-1.mga5