[Git][security-tracker-team/security-tracker][master] Add two new nano issues, unclear upstream status

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
915e49db by Salvatore Bonaccorso at 2026-04-22T23:06:10+02:00
Add two new nano issues, unclear upstream status

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -29,9 +29,15 @@ CVE-2026-6844 (A flaw was found in the `readelf` utility of the binutils package
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2460016
 	NOTE: binutils not covered by security support
 CVE-2026-6843 (A flaw was found in nano. A local user could exploit a format string v ...)
-	TODO: check
+	- nano <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2460017
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2455127
+	TODO: check reported upstream?
 CVE-2026-6842 (A flaw was found in nano. In environments with permissive umask settin ...)
-	TODO: check
+	- nano <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2460018
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2455314
+	TODO: check reported upstream?
 CVE-2026-6515 (GitLab has remediated an issue in GitLab CE/EE affecting all versions  ...)
 	- gitlab <not-affected> (Only affects 18.x)
 CVE-2026-6396 (The Fast & Fancy Filter \u2013 3F plugin for WordPress is vulnerable t ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/915e49db49b4195ddc98d6b2438aa74694e386fa

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/915e49db49b4195ddc98d6b2438aa74694e386fa
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260422/40b02ef1/attachment.htm>