[ubuntu/xenial-updates] calibre 2.55.0+dfsg-1ubuntu0.2 (Accepted)

[Ubuntu Archive Robot]

calibre (2.55.0+dfsg-1ubuntu0.2) xenial-security; urgency=medium

  * SECURITY UPDATE: JavaScript in a book can access local files using
    XMLHttpRequest (LP: #1758699).
    - fix-CVE-2016-10187.patch
    - CVE-2016-10187
  * SECURITY UPDATE: Malicious code execution when using CPickle instead of
    JSON.
    - fix-CVE-2018-7889.patch
    - CVE-2018-7889

Date: 2018-04-12 04:52:13.350865+00:00
Changed-By: Simon Quigley <tsimonq2 at ubuntu.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/calibre/2.55.0+dfsg-1ubuntu0.2
-------------- next part --------------
Sorry, changesfile not available.