Re: [Nano-devel] New prerelease for security tweaks

[Jordi Mallach]

Hi Chris!

On Wed, Apr 07, 2010 at 02:41:19AM -0400, Chris Allegretta wrote:
> Now that the AFJ fun is hopefully behind us,  we recently received
> some new attention from a security perspective, and an article was
> published on symlink attacks when running nano as root.  The article
> is at http://drosenbe.blogspot.com/2010/03/nano-as-root.html if you're
> interested.

Interesting! Do you know if there are CVE numbers assigned for these?

I'm going to include the patch currently in SVN for an immediate Debian
upload.

Jordi
-- 
Jordi Mallach Pérez  --  Debian developer     http://www.debian.org/
address@hidden     address@hidden     http://www.sindominio.net/
GnuPG public key information available at http://oskuro.net/