Publishing details

Published on 2023-10-31
Copied from ubuntu jammy in PPA for Ubuntu Security Proposed by Marc Deslauriers

Changelog

open-vm-tools (2:12.1.5-3~ubuntu0.22.04.4) jammy-security; urgency=medium

  * SECURITY UPDATE: SAML Bypass
    - debian/patches/CVE-2023-34058.patch: don't accept tokens with
      unrelated certs in open-vm-tools/vgauth/common/certverify.c,
      open-vm-tools/vgauth/common/certverify.h,
      open-vm-tools/vgauth/common/prefs.h,
      open-vm-tools/vgauth/serviceImpl/saml-xmlsec1.c.
    - CVE-2023-34058
  * SECURITY UPDATE: file descriptor hijack
    - debian/patches/CVE-2023-34059.patch: change privilege dropping order
      in  open-vm-tools/services/vmtoolsd/mainPosix.c,
      open-vm-tools/vmware-user-suid-wrapper/main.c.
    - CVE-2023-34059

 -- Marc Deslauriers <email address hidden>  Fri, 27 Oct 2023 07:38:17 -0400

Available diffs

diff from 2:12.1.5-3~ubuntu0.22.04.3 to 2:12.1.5-3~ubuntu0.22.04.4 (4.6 KiB)

Builds

amd64
arm64

Built packages

open-vm-tools Open VMware Tools for virtual machines hosted on VMware (CLI)

open-vm-tools-containerinfo Open VMware Tools for VMs hosted on VMware (Service Discovery Plugin)

open-vm-tools-containerinfo-dbgsym debug symbols for open-vm-tools-containerinfo

open-vm-tools-dbgsym debug symbols for open-vm-tools

open-vm-tools-desktop Open VMware Tools for virtual machines hosted on VMware (GUI)

open-vm-tools-desktop-dbgsym debug symbols for open-vm-tools-desktop

open-vm-tools-dev Open VMware Tools for virtual machines hosted on VMware (development)

open-vm-tools-salt-minion Open VMware Tools for VMs hosted on VMware (Service Discovery Plugin)

open-vm-tools-sdmp Open VMware Tools for VMs hosted on VMware (Service Discovery Plugin)

open-vm-tools-sdmp-dbgsym debug symbols for open-vm-tools-sdmp

Package files

open-vm-tools-containerinfo-dbgsym_12.1.5-3~ubuntu0.22.04.4_amd64.ddeb (2.9 MiB)
open-vm-tools-containerinfo-dbgsym_12.1.5-3~ubuntu0.22.04.4_arm64.ddeb (2.9 MiB)
open-vm-tools-containerinfo_12.1.5-3~ubuntu0.22.04.4_amd64.deb (191.3 KiB)
open-vm-tools-containerinfo_12.1.5-3~ubuntu0.22.04.4_arm64.deb (174.6 KiB)
open-vm-tools-dbgsym_12.1.5-3~ubuntu0.22.04.4_amd64.ddeb (2.6 MiB)
open-vm-tools-dbgsym_12.1.5-3~ubuntu0.22.04.4_arm64.ddeb (2.3 MiB)
open-vm-tools-desktop-dbgsym_12.1.5-3~ubuntu0.22.04.4_amd64.ddeb (1.3 MiB)
open-vm-tools-desktop-dbgsym_12.1.5-3~ubuntu0.22.04.4_arm64.ddeb (1.2 MiB)
open-vm-tools-desktop_12.1.5-3~ubuntu0.22.04.4_amd64.deb (135.5 KiB)
open-vm-tools-desktop_12.1.5-3~ubuntu0.22.04.4_arm64.deb (128.3 KiB)
open-vm-tools-dev_12.1.5-3~ubuntu0.22.04.4_amd64.deb (524.8 KiB)
open-vm-tools-dev_12.1.5-3~ubuntu0.22.04.4_arm64.deb (531.3 KiB)
open-vm-tools-salt-minion_12.1.5-3~ubuntu0.22.04.4_amd64.deb (17.5 KiB)
open-vm-tools-sdmp-dbgsym_12.1.5-3~ubuntu0.22.04.4_amd64.ddeb (23.4 KiB)
open-vm-tools-sdmp-dbgsym_12.1.5-3~ubuntu0.22.04.4_arm64.ddeb (23.5 KiB)
open-vm-tools-sdmp_12.1.5-3~ubuntu0.22.04.4_amd64.deb (16.6 KiB)
open-vm-tools-sdmp_12.1.5-3~ubuntu0.22.04.4_arm64.deb (16.7 KiB)
open-vm-tools_12.1.5-3~ubuntu0.22.04.4.debian.tar.xz (38.7 KiB)
open-vm-tools_12.1.5-3~ubuntu0.22.04.4.dsc (3.0 KiB)
open-vm-tools_12.1.5-3~ubuntu0.22.04.4_amd64.deb (725.2 KiB)
open-vm-tools_12.1.5-3~ubuntu0.22.04.4_arm64.deb (713.4 KiB)
open-vm-tools_12.1.5.orig.tar.xz (1.7 MiB)