rpm package
opensuse/nano&distro=openSUSE Leap 16.0
pkg:rpm/opensuse/nano&distro=openSUSE%20Leap%2016.0
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-40556 | — | < 9.1-bp160.1.1 | 9.1-bp160.1.1 | Apr 28, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | ||
| CVE-2026-6843 | Med | 5.5 | < 9.1-bp160.1.1 | 9.1-bp160.1.1 | Apr 22, 2026 | A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By creating a directory with a name containing `printf` specifiers, the application attempts to display this name, leading to a segmentation fault (SEGV). This resul | |
| CVE-2026-6842 | Low | 2.5 | < 9.1-bp160.1.1 | 9.1-bp160.1.1 | Apr 22, 2026 | A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unin |
- CVE-2026-40556Apr 28, 2026affected < 9.1-bp160.1.1fixed 9.1-bp160.1.1
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
- affected < 9.1-bp160.1.1fixed 9.1-bp160.1.1
A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By creating a directory with a name containing `printf` specifiers, the application attempts to display this name, leading to a segmentation fault (SEGV). This resul
- affected < 9.1-bp160.1.1fixed 9.1-bp160.1.1
A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unin