FEDORA-2026-3111ffa11a — security update for nano

stable

nano-8.7.1-2.fc44

FEDORA-2026-3111ffa11a created by lzaoral 3 months ago for Fedora 44

fix CVE-2026-6842 and CVE-29026-6843

Resolves: CVE-2026-6842 Resolves: CVE-2026-6843 Resolves: #2455127 Resolves: #2455314

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-3111ffa11a

This update has been submitted for testing by lzaoral.

3 months ago

This update's test gating status has been changed to 'waiting'.

3 months ago

lzaoral edited this update.

3 months ago

g6avk provided feedback 3 months ago

karma

This update's test gating status has been changed to 'passed'.

3 months ago

This update has been pushed to testing.

2 months ago

filiperosset commented & provided feedback 2 months ago

karma

no regressions noted

This update can be pushed to stable now if the maintainer wishes

2 months ago

geraldosimiao provided feedback 2 months ago

karma

This update has been submitted for stable by bodhi.

2 months ago

This update has been pushed to stable.

2 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

3 months ago

in testing

2 months ago

in stable

2 months ago

modified

3 months ago

approved

2 months ago

Builds

nano-8.7.1-2.fc44

BZ#2455127 [Security] Format String Vulnerability in nano's statusline() via errormessage Buffer

BZ#2460502 CVE-2026-6842 nano: nano: Local attacker can inject malicious .desktop launcher due to insecure directory permissions [fedora-all]

BZ#2460503 CVE-2026-6843 nano: nano: Format string vulnerability leads to Denial of Service [fedora-all]

nano-8.7.1-2.fc44

Automated Test Results

passed