SUSE-SU-2025:03435-1

Опубликовано: 30 сент. 2025

Источник: suse-cvrf

Описание

Security update for open-vm-tools

This update for open-vm-tools fixes the following issues:

CVE-2025-41244: local privilege escalation via the Service Discovery Plugin (bsc#1250373).

Список пакетов

Container suse/sle-micro-rancher/5.2:latest

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

Container suse/sle-micro-rancher/5.3:latest

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

Container suse/sle-micro-rancher/5.4:latest

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

Container suse/sle-micro/5.5:latest

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

SUSE Enterprise Storage 7.1

libvmtools-devel-13.0.0-150300.64.1

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

open-vm-tools-containerinfo-13.0.0-150300.64.1

open-vm-tools-desktop-13.0.0-150300.64.1

open-vm-tools-salt-minion-13.0.0-150300.64.1

open-vm-tools-sdmp-13.0.0-150300.64.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

libvmtools-devel-13.0.0-150300.64.1

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

open-vm-tools-containerinfo-13.0.0-150300.64.1

open-vm-tools-desktop-13.0.0-150300.64.1

open-vm-tools-salt-minion-13.0.0-150300.64.1

open-vm-tools-sdmp-13.0.0-150300.64.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

libvmtools-devel-13.0.0-150300.64.1

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

open-vm-tools-containerinfo-13.0.0-150300.64.1

open-vm-tools-desktop-13.0.0-150300.64.1

open-vm-tools-salt-minion-13.0.0-150300.64.1

open-vm-tools-sdmp-13.0.0-150300.64.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

libvmtools-devel-13.0.0-150300.64.1

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

open-vm-tools-containerinfo-13.0.0-150300.64.1

open-vm-tools-desktop-13.0.0-150300.64.1

open-vm-tools-salt-minion-13.0.0-150300.64.1

open-vm-tools-sdmp-13.0.0-150300.64.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

libvmtools-devel-13.0.0-150300.64.1

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

open-vm-tools-containerinfo-13.0.0-150300.64.1

open-vm-tools-desktop-13.0.0-150300.64.1

open-vm-tools-salt-minion-13.0.0-150300.64.1

open-vm-tools-sdmp-13.0.0-150300.64.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

libvmtools-devel-13.0.0-150300.64.1

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

open-vm-tools-containerinfo-13.0.0-150300.64.1

open-vm-tools-desktop-13.0.0-150300.64.1

open-vm-tools-salt-minion-13.0.0-150300.64.1

open-vm-tools-sdmp-13.0.0-150300.64.1

SUSE Linux Enterprise Micro 5.1

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

SUSE Linux Enterprise Micro 5.2

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

SUSE Linux Enterprise Micro 5.3

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

SUSE Linux Enterprise Micro 5.4

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

SUSE Linux Enterprise Micro 5.5

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

SUSE Linux Enterprise Server 15 SP3-LTSS

libvmtools-devel-13.0.0-150300.64.1

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

open-vm-tools-containerinfo-13.0.0-150300.64.1

open-vm-tools-desktop-13.0.0-150300.64.1

open-vm-tools-salt-minion-13.0.0-150300.64.1

open-vm-tools-sdmp-13.0.0-150300.64.1

SUSE Linux Enterprise Server 15 SP4-LTSS

libvmtools-devel-13.0.0-150300.64.1

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

open-vm-tools-containerinfo-13.0.0-150300.64.1

open-vm-tools-desktop-13.0.0-150300.64.1

open-vm-tools-salt-minion-13.0.0-150300.64.1

open-vm-tools-sdmp-13.0.0-150300.64.1

SUSE Linux Enterprise Server 15 SP5-LTSS

libvmtools-devel-13.0.0-150300.64.1

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

open-vm-tools-containerinfo-13.0.0-150300.64.1

open-vm-tools-desktop-13.0.0-150300.64.1

open-vm-tools-salt-minion-13.0.0-150300.64.1

open-vm-tools-sdmp-13.0.0-150300.64.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

libvmtools-devel-13.0.0-150300.64.1

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

open-vm-tools-containerinfo-13.0.0-150300.64.1

open-vm-tools-desktop-13.0.0-150300.64.1

open-vm-tools-salt-minion-13.0.0-150300.64.1

open-vm-tools-sdmp-13.0.0-150300.64.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

libvmtools-devel-13.0.0-150300.64.1

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

open-vm-tools-containerinfo-13.0.0-150300.64.1

open-vm-tools-desktop-13.0.0-150300.64.1

open-vm-tools-salt-minion-13.0.0-150300.64.1

open-vm-tools-sdmp-13.0.0-150300.64.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

libvmtools-devel-13.0.0-150300.64.1

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

open-vm-tools-containerinfo-13.0.0-150300.64.1

open-vm-tools-desktop-13.0.0-150300.64.1

open-vm-tools-salt-minion-13.0.0-150300.64.1

open-vm-tools-sdmp-13.0.0-150300.64.1

SUSE Manager Proxy LTS 4.3

libvmtools-devel-13.0.0-150300.64.1

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

open-vm-tools-containerinfo-13.0.0-150300.64.1

open-vm-tools-salt-minion-13.0.0-150300.64.1

open-vm-tools-sdmp-13.0.0-150300.64.1

SUSE Manager Server LTS 4.3

libvmtools-devel-13.0.0-150300.64.1

libvmtools0-13.0.0-150300.64.1

open-vm-tools-13.0.0-150300.64.1

open-vm-tools-containerinfo-13.0.0-150300.64.1

open-vm-tools-salt-minion-13.0.0-150300.64.1

open-vm-tools-sdmp-13.0.0-150300.64.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-202503435-1/
Link for SUSE-SU-2025:03435-1
https://lists.suse.com/pipermail/sle-updates/2025-September/041980.html
E-Mail link for SUSE-SU-2025:03435-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1250373
SUSE Bug 1250373
https://www.suse.com/security/cve/CVE-2025-41244/
SUSE CVE CVE-2025-41244 page

Описание

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

Затронутые продукты

Container suse/sle-micro-rancher/5.2:latest:libvmtools0-13.0.0-150300.64.1

Container suse/sle-micro-rancher/5.2:latest:open-vm-tools-13.0.0-150300.64.1

Container suse/sle-micro-rancher/5.3:latest:libvmtools0-13.0.0-150300.64.1

Container suse/sle-micro-rancher/5.3:latest:open-vm-tools-13.0.0-150300.64.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-41244.html
CVE-2025-41244
https://bugzilla.suse.com/1250373
SUSE Bug 1250373

SUSE-SU-2025:03435-1

Описание

Список пакетов

Container suse/sle-micro-rancher/5.2:latest

Container suse/sle-micro-rancher/5.3:latest

Container suse/sle-micro-rancher/5.4:latest

Container suse/sle-micro/5.5:latest

SUSE Enterprise Storage 7.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

SUSE Linux Enterprise Micro 5.1

SUSE Linux Enterprise Micro 5.2

SUSE Linux Enterprise Micro 5.3

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Micro 5.5

SUSE Linux Enterprise Server 15 SP3-LTSS

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server 15 SP5-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP3

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Linux Enterprise Server for SAP Applications 15 SP5

SUSE Manager Proxy LTS 4.3

SUSE Manager Server LTS 4.3

Ссылки

Уязвимость: CVE-2025-41244

Описание

Затронутые продукты

Ссылки