Lucene search

K
slackwareSlackware Linux ProjectSSA-2022-252-01
HistorySep 10, 2022 - 1:56 a.m.

[slackware-security] vim

2022-09-1001:56:55
Slackware Linux Project
www.slackware.com
13

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

35.0%

New vim packages are available for Slackware 15.0 and -current to
fix a security issue.

Here are the details from the Slackware 15.0 ChangeLog:

patches/packages/vim-9.0.0417-i586-1_slack15.0.txz: Upgraded.
Fixed null pointer dereference.
Thanks to marav for the heads-up.
For more information, see:
https://vulners.com/cve/CVE-2022-3153
(* Security fix *)
patches/packages/vim-gvim-9.0.0417-i586-1_slack15.0.txz: Upgraded.

Where to find the new packages:

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)

Also see the “Get Slack” section on http://slackware.com for
additional mirror sites near you.

Updated packages for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/vim-9.0.0417-i586-1_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/vim-gvim-9.0.0417-i586-1_slack15.0.txz

Updated packages for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/vim-9.0.0417-x86_64-1_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/vim-gvim-9.0.0417-x86_64-1_slack15.0.txz

Updated packages for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/ap/vim-9.0.0417-i586-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/vim-gvim-9.0.0417-i586-1.txz

Updated packages for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ap/vim-9.0.0417-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/vim-gvim-9.0.0417-x86_64-1.txz

MD5 signatures:

Slackware 15.0 packages:
e79c4f4fa020c2a8c915d64d34d82b55 vim-9.0.0417-i586-1_slack15.0.txz
5fe446aca81a47b6ba66edaf4d9f839c vim-gvim-9.0.0417-i586-1_slack15.0.txz

Slackware x86_64 15.0 packages:
c30a8f1a1cf4910a7443ed671e3b5d41 vim-9.0.0417-x86_64-1_slack15.0.txz
17ff67a8ed7fe213e2db3014c1d1738d vim-gvim-9.0.0417-x86_64-1_slack15.0.txz

Slackware -current packages:
c4611f9e69eb664633cb208889b1de68 ap/vim-9.0.0417-i586-1.txz
71abcd8276f3bcc4323bd82794d58795 xap/vim-gvim-9.0.0417-i586-1.txz

Slackware x86_64 -current packages:
5b1fe63734ccead50277ae2c5202e6d4 ap/vim-9.0.0417-x86_64-1.txz
b70b5bb125f4ee106a8b962de940b106 xap/vim-gvim-9.0.0417-x86_64-1.txz

Installation instructions:

Upgrade the packages as root:
> upgradepkg vim-9.0.0417-i586-1_slack15.0.txz vim-gvim-9.0.0417-i586-1_slack15.0.txz

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

35.0%