4 Commits

Author SHA1 Message Date
Chen Qi
22d5614d2d open-vm-tools: add CVE_PRODUCT
vmware:tools is also a valid CVE_PRODUCT for open-vm-tools,
e.g., https://nvd.nist.gov/vuln/detail/CVE-2023-20867.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-08-07 09:01:00 -07:00
Yi Zhao
cb3864b380 open-vm-tools: Security fix CVE-2023-20867
CVE-2023-20867:
A fully compromised ESXi host can force VMware Tools to fail to
authenticate host-to-guest operations, impacting the confidentiality and
integrity of the guest virtual machine.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2023-20867

Patch from:
https://github.com/vmware/open-vm-tools/blob/CVE-2023-20867.patch/2023-20867-Remove-some-dead-code.patch

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-06-29 14:45:34 -07:00
Khem Raj
84a8adc1c1 open-vm-tools: Fix build with 64-bit time_t
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-01-06 11:39:11 -08:00
Yi Zhao
4a3313094a open-vm-tools: upgrade 12.1.0 -> 12.1.5
Release Notes:
https://github.com/vmware/open-vm-tools/blob/stable-12.1.5/ReleaseNotes.md

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-12-27 09:55:18 -08:00