Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Sun, 29 Jan 2017 17:34:44 +0100
From: Martin Pitt <>
Cc: Kovid Goyal <>,
	Antoine Beaupré <>
Subject: Requesting CVE for calibre file disclosure

Hello all,

Calibre 2.75 fixed what looks like a local data disclosure vulnerability:

@Kovid: Would you mind making the original Launchpad bug public?

@osssec: Can you please assign a CVE on this one?

Thanks to Antoine for pointing this out, this deserves an update in stable
distro releases.


Download attachment "signature.asc" of type "application/pgp-signature" (820 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.