1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • [SECURITY] [DSA 5215-1] open-vm-tools security update

    From Salvatore Bonaccorso@21:1/5 to All on Wed Aug 24 15:20:01 2022
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-5215-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso August 24, 2022 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : open-vm-tools
    CVE ID : CVE-2022-31676
    Debian Bug : 1018012

    A vulnerability was discovered in open-vm-tools, an open source
    implementation of VMware Tools, allowing an unprivileged local guest
    user to escalate their privileges as root user in the virtual machine.

    For the stable distribution (bullseye), this problem has been fixed in
    version 2:11.2.5-2+deb11u1.

    We recommend that you upgrade your open-vm-tools packages.

    For the detailed security status of open-vm-tools please refer to its
    security tracker page at: https://security-tracker.debian.org/tracker/open-vm-tools

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmMGIkpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0Tj0g/7BBmofHgBS2CeHE4YnDGTpNhNG7idYPsv/WzoE7PL6LIZzCwYWuSEtu2/ QYRYM5fNM/gj96/CdKnRbk6E3xyp6pJkUUgU1oQnrC2KnlzGsGsv7HLKra+xpu0o +HN4vqpcU9/kioyAaW4J2GvQbHOh15ZONEsaPyy7l7b7aRwd57SsHlJ0AfRO0N3M mtW8YfaTq93g5gZ6L0GG0rLLYsKyoqNWpN4+fEaEJL8Q0TFrnvVU/1Tr3ywGLDBa 81472pjMsyq8hugDSieWlMnb7ezR2qYL+QU+cnY4N8RNzXY3L8M6ZxCXMPmx0b5C uWWSWQlzwVE8MNmbTwqxMWEFiJUyF2uHc5AwfzXGAujcn1+zEQ/ucrhTxCFHJOFG g5n8C7dABSJWb7oL4DyX33NTFq+1/udc5l3nibxPsAeiGWT1XgJuutgJ/N743iwX sfPW3pgilYafhPHsMk+cxOSCPxb7o7+3eijx9Em2SkPwHv8kPHpk1Pf1Ckp2JDIf DnJ7B/I7t3hNPJSD+uHS+YqbOnvtg24AMEBfS1eIFtw6KSvcUDgfrVh4w3jXlkab 5l+BxKGgYQc+Tlwtbdcbj3QrYSlykZs5hFOzOOdkVLxjemRlQnzTX0HFSmfphUzv 7C2i0dLx/Spiu15q/tqwlCo2wcGOR1/BsVkCwgHdHVVdFPdivIY=
    =s5Rk
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)