Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:2604-1

Опубликовано: 22 июн. 2023
Источник: suse-cvrf

Описание

Security update for open-vm-tools

This update for open-vm-tools fixes the following issues:

  • CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143).

Bug fixes:

  • Fixed build problem with grpc 1.54 (bsc#1210695).

Список пакетов

Container suse/sle-micro-rancher/5.2:latest
libvmtools0-12.2.0-150300.29.1
open-vm-tools-12.2.0-150300.29.1
Container suse/sle-micro-rancher/5.3:latest
libvmtools0-12.2.0-150300.29.1
open-vm-tools-12.2.0-150300.29.1
Container suse/sle-micro-rancher/5.4:latest
libvmtools0-12.2.0-150300.29.1
open-vm-tools-12.2.0-150300.29.1
Container suse/sle-micro/5.5:latest
libvmtools0-12.2.0-150300.29.1
open-vm-tools-12.2.0-150300.29.1
Image SLES15-SP3-CHOST-BYOS-SAP-CCloud
libvmtools0-12.2.0-150300.29.1
open-vm-tools-12.2.0-150300.29.1
Image SLES15-SP4-CHOST-BYOS-SAP-CCloud
libvmtools0-12.2.0-150300.29.1
open-vm-tools-12.2.0-150300.29.1
Image SLES15-SP5-CHOST-BYOS-SAP-CCloud
libvmtools0-12.2.0-150300.29.1
open-vm-tools-12.2.0-150300.29.1
SUSE Linux Enterprise Micro 5.1
libvmtools0-12.2.0-150300.29.1
open-vm-tools-12.2.0-150300.29.1
SUSE Linux Enterprise Micro 5.2
libvmtools0-12.2.0-150300.29.1
open-vm-tools-12.2.0-150300.29.1
SUSE Linux Enterprise Micro 5.3
libvmtools0-12.2.0-150300.29.1
open-vm-tools-12.2.0-150300.29.1
SUSE Linux Enterprise Micro 5.4
libvmtools0-12.2.0-150300.29.1
open-vm-tools-12.2.0-150300.29.1
SUSE Linux Enterprise Module for Basesystem 15 SP4
libvmtools-devel-12.2.0-150300.29.1
libvmtools0-12.2.0-150300.29.1
open-vm-tools-12.2.0-150300.29.1
open-vm-tools-salt-minion-12.2.0-150300.29.1
open-vm-tools-sdmp-12.2.0-150300.29.1
SUSE Linux Enterprise Module for Basesystem 15 SP5
libvmtools-devel-12.2.0-150300.29.1
libvmtools0-12.2.0-150300.29.1
open-vm-tools-12.2.0-150300.29.1
open-vm-tools-salt-minion-12.2.0-150300.29.1
open-vm-tools-sdmp-12.2.0-150300.29.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP4
open-vm-tools-desktop-12.2.0-150300.29.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP5
open-vm-tools-desktop-12.2.0-150300.29.1
SUSE Linux Enterprise Real Time 15 SP3
libvmtools-devel-12.2.0-150300.29.1
libvmtools0-12.2.0-150300.29.1
open-vm-tools-12.2.0-150300.29.1
open-vm-tools-desktop-12.2.0-150300.29.1
open-vm-tools-sdmp-12.2.0-150300.29.1
openSUSE Leap 15.4
libvmtools-devel-12.2.0-150300.29.1
libvmtools0-12.2.0-150300.29.1
open-vm-tools-12.2.0-150300.29.1
open-vm-tools-desktop-12.2.0-150300.29.1
open-vm-tools-salt-minion-12.2.0-150300.29.1
open-vm-tools-sdmp-12.2.0-150300.29.1
openSUSE Leap 15.5
libvmtools-devel-12.2.0-150300.29.1
libvmtools0-12.2.0-150300.29.1
open-vm-tools-12.2.0-150300.29.1
open-vm-tools-desktop-12.2.0-150300.29.1
open-vm-tools-salt-minion-12.2.0-150300.29.1
open-vm-tools-sdmp-12.2.0-150300.29.1
openSUSE Leap Micro 5.3
libvmtools0-12.2.0-150300.29.1
open-vm-tools-12.2.0-150300.29.1

Ссылки

Описание

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:libvmtools0-12.2.0-150300.29.1
Container suse/sle-micro-rancher/5.2:latest:open-vm-tools-12.2.0-150300.29.1
Container suse/sle-micro-rancher/5.3:latest:libvmtools0-12.2.0-150300.29.1
Container suse/sle-micro-rancher/5.3:latest:open-vm-tools-12.2.0-150300.29.1
Ссылки