Debian/calibre: high 7.8
gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Pyth
Action: Upgrade calibre to 3.19.0+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.19.0+dfsg-1 | - |
Fixed versions
| 3.19.0+dfsg-1 |
Sources
published · modified · JSON