GNU nano - Bugs: bug #63964, format string vulnerabilities for...
You are not allowed to post comments on this tracker with your current authentication level.
bug #63964: format string vulnerabilities for linter and custom rcfile
Submitter: | Vince Vince <vincevince> | ||
Submitted: | Sun 26 Mar 2023 10:51:36 PM UTC | ||
Severity: | 4 - Important | Status: | Fixed |
Assigned to: | bens | Open/Closed: | Closed |
Thu 02 May 2024 05:33:12 AM UTC, comment #2: |
Benno Schulenberg <bens> |
Mon 27 Mar 2023 10:18:59 AM UTC, comment #1: Thanks for reporting, and for the clear reproduction recipes!
|
Benno Schulenberg <bens> |
Sun 26 Mar 2023 10:51:36 PM UTC, original submission:
I want to report some format string security vulnerabilities in nano - the worst of which can cause potential arbitrary code execution when running the linter on a file.
|
Vince Vince <vincevince> |
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 9 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2024-05-02 | bens | Open/Closed | Open | Closed | |
2023-03-27 | bens | Severity | 3 - Normal | 4 - Important | |
Status | None | Fixed | |||
Assigned to | None | bens | |||
Summary | Format string vulnerabilities in nano | format string vulnerabilities for linter and custom rcfile | |||
2023-03-26 | vincevince | Attached File | - | Added nano.formatstringvulns.patch, #54527 | |
Attached File | - | Added test.py, #54528 | |||
Attached File | - | Added nanorc.txt, #54529 | |||
Attached File | - | Added nanorc%n%n%n%n%n.txt, #54530 |
Powered by Savane 3.13-bb6a.
Corresponding source code
The fix was released in nano-8.0. Thanks again for reporting.