open-vm-tools-12.1.5-2.el8.ML.1

エラータID: AXSA:2023-6180:06

Release date: 
Friday, June 30, 2023 - 04:37
Subject: 
open-vm-tools-12.1.5-2.el8.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Low
Description: 

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.

Security Fix(es):

* open-vm-tools: authentication bypass vulnerability in the vgauth module (CVE-2023-20867)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-20867
A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

Solution: 

Update packages.

CVEs: 
CVE-2023-20867
A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.
Additional Info: 

N/A

Download: 

SRPMS
  1. open-vm-tools-12.1.5-2.el8.ML.1.src.rpm
    MD5: 950ded09b6e620785b6c8d1569f69d8d
    SHA-256: c54247becfa2850b1f464327c499128a688b901ba15bf6273e3f60705a56bac3
    Size: 4.15 MB

Asianux Server 8 for x86_64
  1. open-vm-tools-12.1.5-2.el8.ML.1.x86_64.rpm
    MD5: 0f6f6a13b2b119fd4b0ce47ccca7cf3d
    SHA-256: 656ce3a89cb9e890554f7ebef75c1d91119473277730fe3aa48706fe00aabd12
    Size: 874.69 kB
  2. open-vm-tools-desktop-12.1.5-2.el8.ML.1.x86_64.rpm
    MD5: 60076893aaeb0f2a0e0912194b53f728
    SHA-256: 3471907280ee0cc648f11d16093d7d00af1d24818aeb665b004a01e29c5a12d3
    Size: 201.46 kB
  3. open-vm-tools-salt-minion-12.1.5-2.el8.ML.1.x86_64.rpm
    MD5: 7abdc600d3cd366371cb381695550b11
    SHA-256: a5544bd00834ecb92012300fe53c242a7cb444aff75fb089ee30f92ae8a0067d
    Size: 41.39 kB
  4. open-vm-tools-sdmp-12.1.5-2.el8.ML.1.x86_64.rpm
    MD5: 8c6e244ca2409ac9d6153cf073dbced8
    SHA-256: ee938b1308389b56592fbbf108456ae6ffa6e4970672c7d5a6bce7c7251b1775
    Size: 42.36 kB