[Backport release-25.11] calibre: backport multiple CVE patches#496499
[Backport release-25.11] calibre: backport multiple CVE patches#496499sempiternal-aurora wants to merge 4 commits intoNixOS:release-25.11from
Conversation
CVE: https://nvd.nist.gov/vuln/detail/CVE-2026-26064 Upstream advisory: GHSA-72ch-3hqc-pgmp Nix security tracking issue: https://tracker.security.nixos.org/issues/NIXPKGS-2026-0326 Fixes NixOS#494339 Not-cherry-picked-because: unstable version bump not suitable for backport
CVE: https://nvd.nist.gov/vuln/detail/CVE-2026-26065 Upstream advisory: GHSA-vmfh-7mr7-pp2w Nix security tracking issue: https://tracker.security.nixos.org/issues/NIXPKGS-2026-0327 Fixes NixOS#494340 Not-cherry-picked-because: unstable version bump not suitable for backport
CVE: https://nvd.nist.gov/vuln/detail/CVE-2026-27810 Upstream advisory: GHSA-5fpj-fxw7-8grw Nix security tracking issue: https://tracker.security.nixos.org/issues/NIXPKGS-2026-0485 Fixes NixOS#495148 Not-cherry-picked-because: unstable version bump not suitable for backport
CVE: https://nvd.nist.gov/vuln/detail/CVE-2026-27824 Upstream advisory: GHSA-vhxc-r7v8-2xrw Nix security tracking issue: https://tracker.security.nixos.org/issues/NIXPKGS-2026-0504 Fixes NixOS#496127 Not-cherry-picked-because: unstable version bump not suitable for backport
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
This report is automatically generated by the PR / Check / cherry-pick CI workflow.
Some of the commits in this PR require the author's and reviewer's attention.
If you need to merge this PR despite the warnings, please dismiss this review shortly before merging.
Important
eda05a6 is not a cherry-pick, because: unstable version bump not suitable for backport. Please review this commit manually.
Important
75c7832 is not a cherry-pick, because: unstable version bump not suitable for backport. Please review this commit manually.
Important
a96c6c9 is not a cherry-pick, because: unstable version bump not suitable for backport. Please review this commit manually.
Important
59903d8 is not a cherry-pick, because: unstable version bump not suitable for backport. Please review this commit manually.
Hint: The full diffs are also available in the runner logs with slightly better highlighting.
nixpkgs-ci
bot
added
10.rebuild-linux: 1-10
sempiternal-aurora
added
the
1.severity: security
|
|
I've tested the main program and the server, and they both seem to work properly. I've also checked all the CVEs and these seem to be the correct patches. |
nixpkgs-ci
bot
added
the
12.approvals: 1
|
This pull request has been mentioned on NixOS Discourse. There might be relevant details there: https://discourse.nixos.org/t/prs-already-reviewed/2617/2843 |
3 participants
Manually backporting CVE fixes to #494339 #494340 #495148 #496127 because the unstable version bump to 9.4.0 isn't suitable for backporting imo.
Things done
passthru.tests.nixpkgs-reviewon this PR. See nixpkgs-review usage../result/bin/.