Nixpkgs security tracker

Dismissed

Permalink CVE-2011-4125

updated 3 months, 1 week ago by @LeSuisse Activity log

Created suggestion 3 months, 2 weeks ago
@LeSuisse ignored package calibre-web 3 months, 1 week ago
@LeSuisse dismissed 3 months, 1 week ago

A untrusted search path issue was found in Calibre at …

A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileged users to execute any program as root.

References

https://git.zx2c4.com/calibre-mount-helper-exploit/about/ x_refsource_MISCx_transferred
https://www.openwall.com/lists/oss-security/2011/11/02/2 x_refsource_MISCx_transferred
https://bugs.launchpad.net/calibre/+bug/885027 x_refsource_MISCx_transferred
https://lwn.net/Articles/464824/ x_refsource_MISCx_transferred

Affected products

Calibre

==unknown

Matching in nixpkgs

pkgs.calibre

Comprehensive e-book software

nixos-unstable 8.16.2
- nixpkgs-unstable 8.16.2
- nixos-unstable-small 8.16.2

pkgs.pkgsRocm.calibre

Comprehensive e-book software

nixos-unstable 8.16.2
- nixpkgs-unstable 8.16.2
- nixos-unstable-small 8.16.2

pkgs.calibre-no-speech

Comprehensive e-book software

nixos-unstable 8.16.2
- nixpkgs-unstable 8.16.2
- nixos-unstable-small 8.16.2

pkgs.pkgsRocm.calibre-no-speech

Comprehensive e-book software

nixos-unstable 8.16.2
- nixpkgs-unstable 8.16.2
- nixos-unstable-small 8.16.2

Ignored packages (1)

pkgs.calibre-web

Web app for browsing, reading and downloading eBooks stored in a Calibre database

nixos-unstable 0.6.25
- nixpkgs-unstable 0.6.25
- nixos-unstable-small 0.6.25

Package maintainers

@pSub Pascal Wittmann <mail@pascal-wittmann.de>

Old issue, current stable branch was never impacted

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.calibre

pkgs.pkgsRocm.calibre

pkgs.calibre-no-speech

pkgs.pkgsRocm.calibre-no-speech

pkgs.calibre-web

Package maintainers