src/calibre/gui2/main.py | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 disable update check by default

src/calibre/gui2/actions/preferences.py | 2 0 + 2 - 0 !
1 file changed, 2 deletions(-)

 disable plugin dialog

It uses a totally non-authenticated and non-trusted way of installing arbitrary
code.

Bug-Debian: http://bugs.debian.org/640026

recipes/lenta_ru.recipe | 4 3 + 1 - 0 !
src/calibre/web/feeds/__init__.py | 4 3 + 1 - 0 !
2 files changed, 6 insertions(+), 2 deletions(-)

 use packaged instead of bundled feedparser python module

setup/extensions.json | 9 0 + 9 - 0 !
src/calibre/ebooks/metadata/archive.py | 2 1 + 1 - 0 !
2 files changed, 1 insertion(+), 10 deletions(-)

 do not build unrar extension as we strip unrar from the tarball

resources/content_server/browse/browse.html | 4 1 + 3 - 0 !
resources/content_server/index.html | 2 1 + 1 - 0 !
2 files changed, 2 insertions(+), 4 deletions(-)

 content-server: don't load external urls for privacy

Spotted by lintian.