MGASA-2026-0121

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2026-0121.html
Import Source
https://advisories.mageia.org/MGASA-2026-0121.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2026-0121
Upstream
  • CVE-2026-6842
  • CVE-2026-6843
Published
2026-05-07T05:06:13Z
Modified
2026-05-07T05:15:06.477387Z
Summary
Updated nano packages fix security vulnerabilities
Details

Local attacker can inject malicious .desktop launcher due to insecure directory permissions. (CVE-2026-6842) Format string vulnerability leads to denial of service. (CVE-2026-6843)

References
Credits

Affected packages

Mageia:9 / nano

Package

Name
nano
Purl
pkg:rpm/mageia/nano?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
7.2-1.2.mga9

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0121.json"