[ubuntu/focal-security] nano 4.8-1ubuntu1.1 (Accepted)

[Rodrigo Figueiredo Zaiden]

nano (4.8-1ubuntu1.1) focal-security; urgency=medium

  * SECURITY UPDATE: Emergency file could be replaced by a malicious symlink.
    - debian/patches/CVE-2024-5742.patch: Use fchmod and fchown in write_file()
      in src/files.c instead of using chmod and chown in emergency_save() in
      src/nano.c. Add EMERGENCY write type in kind_of_writing_type enum in
      src/nano.h. Update fd in write_file() in src/files.c. Based on upstream.
    - CVE-2024-5742

Date: 2024-10-10 13:01:12.155337+00:00
Changed-By: Hlib Korzhynskyy <hlib.korzhynskyy at canonical.com>
Signed-By: Rodrigo Figueiredo Zaiden <rodrigo.zaiden at canonical.com>
https://launchpad.net/ubuntu/+source/nano/4.8-1ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.