nano 4.8-1ubuntu1.1 source package in Ubuntu

Changelog

nano (4.8-1ubuntu1.1) focal-security; urgency=medium

  * SECURITY UPDATE: Emergency file could be replaced by a malicious symlink.
    - debian/patches/CVE-2024-5742.patch: Use fchmod and fchown in write_file()
      in src/files.c instead of using chmod and chown in emergency_save() in
      src/nano.c. Add EMERGENCY write type in kind_of_writing_type enum in
      src/nano.h. Update fd in write_file() in src/files.c. Based on upstream.
    - CVE-2024-5742

 -- Hlib Korzhynskyy <email address hidden>  Wed, 09 Oct 2024 17:50:23 -0230

Upload details

Uploaded by:
Hlib Korzhynskyy
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
editors
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates main editors
Focal security main editors

Downloads

File Size SHA-256 Checksum
nano_4.8.orig.tar.xz 1.4 MiB c348f61c68ab1d573b308398212a09cd68c60fbee20f01a5bd4b50071a258e63
nano_4.8.orig.tar.xz.asc 833 bytes a333dc7af9fd7dfade28dd1f95951e72f547f06897b1fadfba1303b7c8bccb78
nano_4.8-1ubuntu1.1.debian.tar.xz 31.3 KiB dbbbad0564dc0d1dfaf190716184f70436f4e49a2188d365cc1f6ca434dffd28
nano_4.8-1ubuntu1.1.dsc 2.3 KiB ec44eb6e11f1298bdc6cce0c7a2fa6f9b19727bdd50c2e437875c14bbb57defb

View changes file

Binary packages built by this source

nano: small, friendly text editor inspired by Pico

 GNU nano is an easy-to-use text editor originally designed as a replacement
 for Pico, the ncurses-based editor from the non-free mailer package Pine
 (itself now available under the Apache License as Alpine).
 .
 However, GNU nano also implements many features missing in Pico, including:
  - undo/redo
  - line numbering
  - syntax coloring
  - soft-wrapping of overlong lines
  - selecting text by holding Shift
  - interactive search and replace (with regular expression support)
  - a go-to line (and column) command
  - support for multiple file buffers
  - auto-indentation
  - tab completion of filenames and search terms
  - toggling features while running
  - and full internationalization support

nano-dbgsym: debug symbols for nano
nano-tiny: small, friendly text editor inspired by Pico - tiny build

 GNU nano is an easy-to-use text editor originally designed as a replacement
 for Pico, the ncurses-based editor from the non-free mailer package Pine
 (itself now available under the Apache License as Alpine).
 .
 This package contains a build of GNU nano with many features disabled, for
 environments such as rescue disks where resources are limited.

nano-tiny-dbgsym: debug symbols for nano-tiny
nano-udeb: small, friendly text editor inspired by Pico - udeb

 GNU nano is an easy-to-use text editor originally designed as a replacement
 for Pico, the ncurses-based editor from the non-free mailer package Pine
 (itself now available under the Apache License as Alpine).
 .
 This package contains a build of GNU nano with many features disabled, for
 use in debian-installer.