Lucene search

K
slackwareSlackware Linux ProjectSSA-2022-342-02
HistoryDec 08, 2022 - 10:52 p.m.

[slackware-security] vim

2022-12-0822:52:15
Slackware Linux Project
www.slackware.com
17

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

47.9%

New vim packages are available for Slackware 15.0 and -current to
fix security issues.

Here are the details from the Slackware 15.0 ChangeLog:

patches/packages/vim-9.0.1034-i586-1_slack15.0.txz: Upgraded.
This update fixes various security issues such as a heap-based buffer
overflow and use after free.
For more information, see:
https://vulners.com/cve/CVE-2022-4141
https://vulners.com/cve/CVE-2022-3591
https://vulners.com/cve/CVE-2022-3520
https://vulners.com/cve/CVE-2022-3491
https://vulners.com/cve/CVE-2022-4292
https://vulners.com/cve/CVE-2022-4293
(* Security fix *)
patches/packages/vim-gvim-9.0.1034-i586-1_slack15.0.txz: Upgraded.

Where to find the new packages:

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)

Also see the “Get Slack” section on http://slackware.com for
additional mirror sites near you.

Updated packages for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/vim-9.0.1034-i586-1_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/vim-gvim-9.0.1034-i586-1_slack15.0.txz

Updated packages for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/vim-9.0.1034-x86_64-1_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/vim-gvim-9.0.1034-x86_64-1_slack15.0.txz

Updated packages for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/ap/vim-9.0.1034-i586-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/vim-gvim-9.0.1034-i586-1.txz

Updated packages for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ap/vim-9.0.1034-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/vim-gvim-9.0.1034-x86_64-1.txz

MD5 signatures:

Slackware 15.0 packages:
afb9ddd11396dc1445dd39e682432650 vim-9.0.1034-i586-1_slack15.0.txz
931bb7c5bb09082585087d9314a628ae vim-gvim-9.0.1034-i586-1_slack15.0.txz

Slackware x86_64 15.0 packages:
e6e934d80695f0838a709e4ac7f38e49 vim-9.0.1034-x86_64-1_slack15.0.txz
b276ba29f0cfc8a993a12db8984f1aec vim-gvim-9.0.1034-x86_64-1_slack15.0.txz

Slackware -current packages:
a8ab84b70144d137b3ace13b42ffe92f ap/vim-9.0.1034-i586-1.txz
c1080d855dcd7e7ce840ebd4b9101ec7 xap/vim-gvim-9.0.1034-i586-1.txz

Slackware x86_64 -current packages:
ff7b725d7d5bc474aa3fdf9e9a5b4ec7 ap/vim-9.0.1034-x86_64-1.txz
383a0901a646767ecbfd35ca266fec83 xap/vim-gvim-9.0.1034-x86_64-1.txz

Installation instructions:

Upgrade the packages as root:
> upgradepkg vim-9.0.1034-i586-1_slack15.0.txz vim-gvim-9.0.1034-i586-1_slack15.0.txz

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

47.9%