[ol8_appstream] open-vm-tools-12.2.5-3.0.1.el8_9.1.x86_64

The open-vm-tools project is an open source implementation of VMware Tools. It
is a suite of open source virtualization utilities and drivers to improve the
functionality, user experience and administration of VMware virtual machines.
This package contains only the core user-space programs and libraries of
open-vm-tools.

Changelog (Show File list) (Show related packages)

• Mon Nov 20 2023 Darren Archibald <darren.archibald@oracle.com> - 12.2.5-3.0.1.1

  - Fix CVE-2023-34058 open-vm-tools: SAML token signature bypass
  - Fix CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper

• Wed Nov 15 2023 EL Errata <el-errata_ww@oracle.com> - 12.2.5-3.0.1

  - Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968]
  - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019]
  - Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 21819156]

• Thu Sep 28 2023 Jon Maloy <jmaloy@redhat.com> - 12.2.5-3.el8_9

  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-2447]
  - Resolves: RHEL-2447
    ([RHEL8.9][ESXi]Latest version of open-vm-tools breaks VM backups)

• Sun Sep 17 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2.el8_9

  - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [bz#2236543]
  - Resolves: bz#2236543
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-8])

• Tue Jul 11 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1

  - Rebase to open-vm-tools 12.2.5 [bz#2214861]
  - Resolves: bz#2214861
    ([ESXi][RHEL8]open-vm-tools version 12.2.5 has been released - please rebase)
  - Resolves: bz#2216415
    ([ESXi][RHEL8] URL in service unit files are started from http instead of https)

• Wed Jun 28 2023 Jon Maloy <jmaloy@redhat.com> - 12.2.0-3

  - ovt-Remove-some-dead-code.patch [bz#2215563]
  - Resolves: bz#2215563
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-8])

• Wed May 03 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1

  - Rebase to open-vm-tools 12.2.0 [bz#2177068]
  - Resolves: bz#2177068
    ([ESXi][RHEL8]open-vm-tools version 12.2.0 has been released - please rebase)

• Fri Dec 09 2022 Miroslav Rezanina <mrezanin@redhat.com> 12.1.5-1

  - Rebase to open-vm-tools 12.1.5 [bz#2150188]
  - Resolves: bz#2150188
    (ESXi][RHEL8]Open-vm-tools release 12.1.5 has been released - please rebase)

• Tue Sep 13 2022 Miroslav Rezanina <mrezanin@redhat.com> 12.1.0-1

  - Rebase to open-vm-tools 12.1.0
  - Resolves: bz#2121196
    ([ESXi][RHEL8]Open-vm-tools release 12.1.0 has been released - please rebase)

• Tue Sep 06 2022 Jon Maloy <jmaloy@redhat.com> - 12.0.5-2

  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119284]
  - Resolves: bz#2119284
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-8.7.0])