[SECURITY] [DLA 859-1] calibre security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Package : calibre
Version : 0.8.51+dfsg1-0.1+deb7u1
CVE ID : CVE-2016-10187
Debian Bug : 853004
It was found that a javascript present in the book can access files on the
computer using XMLHttpRequest.
For Debian 7 "Wheezy", these problems have been fixed in version
0.8.51+dfsg1-0.1+deb7u1.
We recommend that you upgrade your calibre packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=7eSx
-----END PGP SIGNATURE-----
Reply to: