[Bug 271986] emulators/open-vm-tools: update to 12.2.5
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Tue, 13 Jun 2023 23:39:45 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=271986
Bug ID: 271986
Summary: emulators/open-vm-tools: update to 12.2.5
Product: Ports & Packages
Version: Latest
Hardware: Any
OS: Any
Status: New
Severity: Affects Only Me
Priority: ---
Component: Individual Port(s)
Assignee: garga@FreeBSD.org
Reporter: jwolfe@vmware.com
Assignee: garga@FreeBSD.org
Flags: maintainer-feedback?(garga@FreeBSD.org)
open-vm-tools 12.2.5 was released on June 13, 2023.
There are no new features in the open-vm-tools 12.2.5 release. This is
primarily a maintenance release that addresses a single critical problem:
* Address CVE-2023-20867 announced in
https://www.vmware.com/security/advisories/VMSA-2023-0013.html
For complete details, see:
https://github.com/vmware/open-vm-tools/releases/tag/stable-12.2.5
Release Notes are available at:
https://github.com/vmware/open-vm-tools/blob/stable-12.2.5/ReleaseNotes.md
The granular changes that have gone into the 12.2.5 release are in the
ChangeLog at:
https://github.com/vmware/open-vm-tools/blob/stable-12.2.5/open-vm-tools/ChangeLog
Patches applicable to previous open-vm-tools releases are available at
https://github.com/vmware/open-vm-tools/tree/CVE-2023-20867.patch
Since FreeBSD typically does not build the vgauth service, the current
open-vm-tools and open-vm-tools-nox11 are not affected by CVE-2023-20867.
However you may want to update to 12.2.5 for FreeBSD customers that may enable
the vgauth service when building from /usr/ports.
--
You are receiving this mail because:
You are the assignee for the bug.