Security bug in Calibre

[DiapDealer]

Originally Posted by splat

Re-read what I said, I never said I did not use calibre, I said I was not one of the affected users (as I do not use Linux).

I did read it again, and it still reads like you're not a calibre user. I re-read it several times before posting to be sure. But I'll allow that your wording did not accurately represent your meaning and drop that little tidbit. I still find your overall motives suspect, though.

[splat]

Originally Posted by DiapDealer

I still find your overall motives suspect, though.

Fair enough, that's your right.

[VicLavigne]

There are two whole threads on this security issue (this one and one in the Calibre subforum), can't we get a mod to close one of them?

[splat]

Originally Posted by VicLavigne

There are two whole threads on this security issue (this one and one in the Calibre subforum), can't we get a mod to close one of them?

Probably close both. They've served the intended purpose, making Linux users aware.

[Kevin8or]

Let me see if I understand this correctly. If I give someone physical access to my computer, and if I'm running it on Linux, then Calibre can be exploited to compromise my comptuter's security?



In that case my OS can be used to compromise my security.

[elcreative]

Originally Posted by Kevin8or

Let me see if I understand this correctly. If I give someone physical access to my computer, and if I'm running it on Linux, then Calibre can be exploited to compromise my comptuter's security?



In that case my OS can be used to compromise my security.

Terrible, ain't it... can't even trust your self let alone your OS...

[din155]

Originally Posted by Kevin8or

If I give someone physical access to my computer, and if I'm running it on Linux, then Calibre can be exploited to compromise my comptuter's security?

I will have to get something to fix myself.!

[Ken Maltby]

Is that accurate "splat", you joined in Dec 2006 and have 106 posts and 36 karma?
Almost five years? Odd

Luck;
Ken

[user_none]

Originally Posted by joed

Why does calibre need to handle mounting in the first place? Do the various linux distro's not already provide a way to mount usb disks?

I'm told that when the mount helper was created four years ago disk mounting was not handled in anything resembling a constant manner.

Originally Posted by Billi

splat, just for the sake of fairness and clearness: are you this Jason Donenfeld from the bug track? Thanks.

He is not. Jason is a personal friend of mine who I have known for years.

Originally Posted by splat

Probably close both. They've served the intended purpose, making Linux users aware

The issue has been resolved by the mount helper being removed from calibre.

[dreams]

Originally Posted by VicLavigne

There are two whole threads on this security issue (this one and one in the Calibre subforum), can't we get a mod to close one of them?

Originally Posted by splat

Probably close both. They've served the intended purpose, making Linux users aware.

Originally Posted by user_none

<snip>
The issue has been resolved by the mount helper being removed from calibre.

OP asked for threads to be closed and the issue has been resolved.

Thread closed.