
Packages / openSUSE Leap 16.0 / Source / Unspecified / nano
Known vulnerabilities
Matching against OpenFactory catalog package versions is in progress.
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2026-6390] Published: A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specially crafted filename containing printf fo | Medium(6.8) | UnknownDetails (10)
|
| [CVE-2026-6842] Published: A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows | Low(2.5) | UnknownDetails (10)
|
| [CVE-2024-5742] Published: nano vulnerability | Medium(6.7) | UnknownDetails (10)
|
Last synced:
Sources
- openSUSE Leap 16.0 OSSSep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c
Repository-signature verification record- Signed-object SHA-256
- 271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c
- Signer fingerprint
- AD485664E901B867051AB15F35A2F86E29B700A4
- Keyring revision
- opensuse-project-signing-key.asc
SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e - Tool and policy
- gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1 - Verification time
- Sep 1, 2026
Repository metadata hash linkage- Result
- Recorded as verified; digest details unavailable