[ubuntu/jammy-security] nano 6.2-1ubuntu0.1 (Accepted)

[Rodrigo Figueiredo Zaiden]

nano (6.2-1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Emergency file could be replaced by a malicious symlink.
    - debian/patches/CVE-2024-5742.patch: Use fchmod and fchown in write_file()
      in src/files.c instead of using chmod and chown in emergency_save() in
      src/nano.c. Add EMERGENCY write type in kind_of_writing_type enum in
      src/definitions.h. Update fd in write_file() in src/files.c. Based on
      upstream.
    - CVE-2024-5742

Date: 2024-10-10 15:05:11.774176+00:00
Changed-By: Hlib Korzhynskyy <hlib.korzhynskyy at canonical.com>
Signed-By: Rodrigo Figueiredo Zaiden <rodrigo.zaiden at canonical.com>
https://launchpad.net/ubuntu/+source/nano/6.2-1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.