[Bug 271986] emulators/open-vm-tools: update to 12.2.5
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Tue, 13 Jun 2023 23:39:45 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=271986 Bug ID: 271986 Summary: emulators/open-vm-tools: update to 12.2.5 Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: Individual Port(s) Assignee: garga@FreeBSD.org Reporter: jwolfe@vmware.com Assignee: garga@FreeBSD.org Flags: maintainer-feedback?(garga@FreeBSD.org) open-vm-tools 12.2.5 was released on June 13, 2023. There are no new features in the open-vm-tools 12.2.5 release. This is primarily a maintenance release that addresses a single critical problem: * Address CVE-2023-20867 announced in https://www.vmware.com/security/advisories/VMSA-2023-0013.html For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.2.5 Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.2.5/ReleaseNotes.md The granular changes that have gone into the 12.2.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.2.5/open-vm-tools/ChangeLog Patches applicable to previous open-vm-tools releases are available at https://github.com/vmware/open-vm-tools/tree/CVE-2023-20867.patch Since FreeBSD typically does not build the vgauth service, the current open-vm-tools and open-vm-tools-nox11 are not affected by CVE-2023-20867. However you may want to update to 12.2.5 for FreeBSD customers that may enable the vgauth service when building from /usr/ports. -- You are receiving this mail because: You are the assignee for the bug.