BSD PortsVulnerable: version 8.14.0 is affected by 8 known vulnerabilities. See below.
wip/calibre 8.14.0 NetBSD
E-book library management application
- System
- NetBSD
- Repository
- pkgsrc-wip
- Maintainer
- [email protected]
- License
- gnu-gpl-v3
- Categories
- wip, misc
Description
calibre is a ebook library management application. Its features are divided into the following categories:
* Library Management * Format conversion (all major ebook formats can be converted from) * Syncing to ebook reader devices * Fetching news from the web and converting it into ebook form * Viewing many different ebook formats * Giving you access to your book collection over the internet using just a browser
In the other systems
The newest version among them is 8.16.2, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| NetBSD | wip/calibre | 8.14.0 | 8 known | - | [email protected] | - |
| FreeBSD | deskutils/calibre by name | 8.16.2_6 newest | none known | - | [email protected] | 2026-10-18 |
| OpenBSD | textproc/calibre by name | 8.0.1p2 | no data | - | The OpenBSD ports mailing-list <[email protected]> | 2026-08-12 |
| MidnightBSD | deskutils/calibre by name | 8.16.2_3 newest | no data | - | [email protected] | 2026-08-07 |
| GhostBSD | deskutils/calibre by name | 8.16.2_5 newest | no data | - | [email protected] | - |
Install
From pkgsrc-wip (no binary package):
cd /usr/pkgsrc/wip/calibre && make install cleanDependency graph
Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.
Dependencies
Build dependencies 4
Run dependencies 44
- archivers/bzip2
- audio/espeak-ng
- converters/py-chardet
- databases/py-apsw
- databases/sqlite3
- devel/chmlib
- devel/libmtp
- devel/libusb1
- devel/py-msgpack
- devel/zlib
- graphics/libwebp
- graphics/libwmf
- graphics/png
- graphics/py-Pillow
- lang/py-six
- multimedia/ffmpeg8
- net/py-dns
- net/py-netifaces
- net/py-zeroconf
- print/poppler
- print/poppler-includes
- print/poppler-qt6
- security/py-cryptodome
- sysutils/py-jeepney
- sysutils/py-psutil
- textproc/hunspell
- textproc/hyphen
- textproc/icu
- textproc/libstemmer
- textproc/py-css-parser
- textproc/py-feedparser
- textproc/py-html2text
- textproc/py-html5-parser
- textproc/py-markdown
- textproc/py-pygments
- textproc/py-regex
- textproc/uchardet
- time/py-dateutil
- wip/podofo010
- www/py-beautifulsoup4
- www/py-mechanize
- www/py-soupsieve
- x11/py-qt6
- x11/qt6-qtbase
No port depends on this one.
Known vulnerabilities 8
- calibre: path-traversal (CVE-2026-25635)
- calibre: path-traversal (CVE-2026-25636)
- calibre: arbitrary-code-execution (CVE-2026-25731)
- calibre: path-traversal (CVE-2026-26064)
- calibre: path-traversal (CVE-2026-26065)
- calibre: http-request-smuggling (CVE-2026-27810)
- calibre: security-bypass (CVE-2026-27824)
- calibre: path-traversal (CVE-2026-30853)