Nixpkgs security tracker

Untriaged

Permalink CVE-2011-4125

created 2 months ago

A untrusted search path issue was found in Calibre at …

A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileged users to execute any program as root.

References

https://git.zx2c4.com/calibre-mount-helper-exploit/about/ x_transferredx_refsource_MISC
https://www.openwall.com/lists/oss-security/2011/11/02/2 x_transferredx_refsource_MISC
https://bugs.launchpad.net/calibre/+bug/885027 x_transferredx_refsource_MISC
https://lwn.net/Articles/464824/ x_transferredx_refsource_MISC

Affected products

Calibre

==unknown

Matching in nixpkgs

pkgs.calibre

Comprehensive e-book software

nixos-unstable 8.16.2
- nixpkgs-unstable 8.16.2
- nixos-unstable-small 8.16.2
nixos-25.11 8.14.0
- nixos-25.11-small 8.14.0
- nixpkgs-25.11-darwin 8.14.0

pkgs.calibre-web

Web app for browsing, reading and downloading eBooks stored in a Calibre database

nixos-unstable 0.6.25
- nixpkgs-unstable 0.6.25
- nixos-unstable-small 0.6.25
nixos-25.11 0.6.25
- nixos-25.11-small 0.6.25
- nixpkgs-25.11-darwin 0.6.25

pkgs.pkgsRocm.calibre

Comprehensive e-book software

nixos-unstable 8.16.2
- nixpkgs-unstable 8.16.2
- nixos-unstable-small 8.16.2
nixos-25.11 8.14.0
- nixos-25.11-small 8.14.0
- nixpkgs-25.11-darwin 8.14.0

pkgs.calibre-no-speech

Comprehensive e-book software

nixos-unstable 8.16.2
- nixpkgs-unstable 8.16.2
- nixos-unstable-small 8.16.2

pkgs.pkgsRocm.calibre-no-speech

Comprehensive e-book software

nixos-unstable 8.16.2
- nixpkgs-unstable 8.16.2
- nixos-unstable-small 8.16.2

Package maintainers

@pSub Pascal Wittmann <mail@pascal-wittmann.de>
@pborzenkov Pavel Borzenkov <pavel@borzenkov.net>

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.calibre

pkgs.calibre-web

pkgs.pkgsRocm.calibre

pkgs.calibre-no-speech

pkgs.pkgsRocm.calibre-no-speech

Package maintainers