tocsin

Debian/nano: low 2.5

A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows

Action: Upgrade nano to 8.4-1+deb13u1 or later.

Affected

introducedfixedlast affected
08.4-1+deb13u1-

Fixed versions

8.4-1+deb13u1

Sources

published · modified · JSON