GNU nano - Bugs: bug #63964, format string vulnerabilities for...
You are not allowed to post comments on this tracker with your current authentication level.
bug #63964: format string vulnerabilities for linter and custom rcfile
Submitter: | Vince Vince <vincevince> | ||
Submitted: | Sun 26 Mar 2023 10:51:36 PM UTC | ||
Severity: | 4 - Important | Status: | Fixed |
Assigned to: | bens | Open/Closed: | Open |
Mon 27 Mar 2023 10:18:59 AM UTC, comment #1: |
Benno Schulenberg <bens>![]() ![]() |
Sun 26 Mar 2023 10:51:36 PM UTC, original submission:
I want to report some format string security vulnerabilities in nano - the worst of which can cause potential arbitrary code execution when running the linter on a file.
|
Vince Vince <vincevince> |
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 8 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2023-03-27 | bens | Severity | 3 - Normal | ![]() |
4 - Important |
Status | None | ![]() |
Fixed | ||
Assigned to | None | ![]() |
bens | ||
Summary | Format string vulnerabilities in nano | ![]() |
format string vulnerabilities for linter and custom rcfile | ||
2023-03-26 | vincevince | Attached File | - | ![]() |
Added nano.formatstringvulns.patch, #54527 |
Attached File | - | ![]() |
Added test.py, #54528 | ||
Attached File | - | ![]() |
Added nanorc.txt, #54529 | ||
Attached File | - | ![]() |
Added nanorc%n%n%n%n%n.txt, #54530 |
Powered by Savane 3.12.
Corresponding source code
Thanks for reporting, and for the clear reproduction recipes!
The two issues should be fixed by commits b8ead3b5 and fdcafb83.
(I've not included your email address in the commit messages, to reduce the chances of you getting spam there.)