ELSA-2023-5217

ELSA-2023-5217 - open-vm-tools security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2023-09-19

Description

[11.0.5-3.0.1]
- fix spaces in vmware udev rule for scsi devices
[Orabug: 24461968]
- Fix vmware udev rule in 99-vmware-scsi-timeout.rules file.
[Orabug: 22815019]
- Increase timeout for scsi devices on VMWare guests by adding a udev rule.
- Created a new file 99-vmware-scsi-timeout.rules
- Modified spec file to install this new file.
[Orabug: 21819156]

[11.0.5-3.el7_9.7]
- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
(CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])

Related CVEs

CVE-2023-20900

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	open-vm-tools-11.0.5-3.0.1.el7_9.7.src.rpm	e03a001d2d29f37a9f93c5037f7b24070dde553136d27b4e3ef88778589fe938	ELSA-2023-7279	ol7_x86_64_latest
	open-vm-tools-11.0.5-3.0.1.el7_9.7.src.rpm	e03a001d2d29f37a9f93c5037f7b24070dde553136d27b4e3ef88778589fe938	ELSA-2023-7279	ol7_x86_64_optional_latest
	open-vm-tools-11.0.5-3.0.1.el7_9.7.src.rpm	e03a001d2d29f37a9f93c5037f7b24070dde553136d27b4e3ef88778589fe938	ELSA-2023-7279	ol7_x86_64_u9_patch
	open-vm-tools-11.0.5-3.0.1.el7_9.7.x86_64.rpm	c72b2a32d47b7a408e81c50dcaa09de1d727979178eccfec099dfaf5d89af991	ELSA-2023-7279	ol7_x86_64_latest
	open-vm-tools-11.0.5-3.0.1.el7_9.7.x86_64.rpm	c72b2a32d47b7a408e81c50dcaa09de1d727979178eccfec099dfaf5d89af991	ELSA-2023-7279	ol7_x86_64_u9_patch
	open-vm-tools-desktop-11.0.5-3.0.1.el7_9.7.x86_64.rpm	713871e003b03110c01ef1eac8ac7e3aa3933457bd511f36a3fda938fe8d13c6	ELSA-2023-7279	ol7_x86_64_latest
	open-vm-tools-desktop-11.0.5-3.0.1.el7_9.7.x86_64.rpm	713871e003b03110c01ef1eac8ac7e3aa3933457bd511f36a3fda938fe8d13c6	ELSA-2023-7279	ol7_x86_64_u9_patch
	open-vm-tools-devel-11.0.5-3.0.1.el7_9.7.x86_64.rpm	76c2216d1a8461ec35db3e2ddf2c39fc94d9b7f046d5f2e1165aa7b937e9e6d0	ELSA-2023-7279	ol7_x86_64_optional_latest
	open-vm-tools-test-11.0.5-3.0.1.el7_9.7.x86_64.rpm	845ffb011fb26249288ca04cee24a7a2d7014bc6ff7655bfea4a1448138f1833	ELSA-2023-7279	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team