Problems with pmount:
1) It does not work out of the box on all distros (it needs configuration)
2) It may not even be installed on some distros, for example, it isn't
installed by default on gentoo.
3) It has been deprecated in favor of udisks (which incidentally calibre tries
to use before falling back to the mount helper)
So, no, pmount is not a suitable replacement.
Fix committed for the latest exploit. Feel free to re-open if you find another
exploit based on 4.
status fixreleased
** Changed in: calibre
Status: Confirmed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/885027
Title:
SUID Mount Helper has 5 Major Vulnerabilities
To manage notifications about this bug go to:
https://bugs.launchpad.net/calibre/+bug/885027/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
