Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-53511 →

DEBIAN-CVE-2026-53511

calibre is an e-book manager. Prior to 9.10.0, a malicious EPUB, OPF, or PDF file can execute arbitrary Python code when its metadata is read by calib...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

calibre is an e-book manager. Prior to 9.10.0, a malicious EPUB, OPF, or PDF file can execute arbitrary Python code when its metadata is read by calibre, including through Add books or Edit books, by embedding a custom column definition with a python: template in calibre:user_metadata that is passed unsanitized to exec() in the template formatter. This issue is fixed in version 9.10.0.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 calibre

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.13.0+repack-2+deb12u10"}]}]

Debian:13 calibre

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 calibre

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.10.0+ds+~0.10.6-1"}]}]

Références

advisory security-tracker.debian.org