-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 25 May 2026 08:19:53 +0900
Source: calibre
Binary: calibre
Architecture: all
Version: 8.5.0+ds-1+deb13u3
Distribution: trixie
Urgency: medium
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: YOKOTA Hiroshi <yokota.hgml@gmail.com>
Description:
 calibre    - powerful and easy to use e-book manager
Closes: 1135543
Changes:
 calibre (8.5.0+ds-1+deb13u3) trixie; urgency=medium
 .
   * Fix security vulnerabilities and code quality issues (Closes: #1135543)
   * CVE-2026-30853: RB Input: Ensure files are extracted within container
     dir
   * CVE-2026-33205 (1/2): E-book viewer: prevent reading background images
     from outside the config dir
   * CVE-2026-33205 (2/2): E-book viewer: Disallow background images from
     the internet. This was an unused feature anyway
   * CVE-2026-33206: TXT Input: Ensure resource files are read only from
     book contents
Checksums-Sha1:
 938caafed5c047c2d293d9c51d507cd998c7c9b8 24045 calibre_8.5.0+ds-1+deb13u3_all-buildd.buildinfo
 48ff968b297ab13c0174f8dcb6ca696d30a8bfe6 29984164 calibre_8.5.0+ds-1+deb13u3_all.deb
Checksums-Sha256:
 ae88c501d2ec61fff133ba42dd0770106dfc51a0250a7b1a0a2a6beb38152681 24045 calibre_8.5.0+ds-1+deb13u3_all-buildd.buildinfo
 38a1e55fdcc5b5db0b6490694b813bdd41143d4376eab594824739e2fe91a14c 29984164 calibre_8.5.0+ds-1+deb13u3_all.deb
Files:
 c7a0b7d24a14f6e7abcc5e90e00349e5 24045 text optional calibre_8.5.0+ds-1+deb13u3_all-buildd.buildinfo
 10a52fede75e3978ea8715afb50f8f31 29984164 text optional calibre_8.5.0+ds-1+deb13u3_all.deb

-----BEGIN PGP SIGNATURE-----
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=Wy94
-----END PGP SIGNATURE-----