ELBA-2024-2965

ELBA-2024-2965 - open-vm-tools bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2024-05-23

Description

[12.3.5-2.0.1]
- Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968]
- Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019]
- Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 21819156]

[12.3.5-2]
- ovt-Restart-tools-on-failure.patch [RHEL-17683]
- Resolves: RHEL-17683
(Add Restart=on-failure to vmtoolsd.service [rhel-8])

[12.3.5-1]
- Rebase to 12.3.5 [RHEL-15059]
- Fix CVE-2023-34058 [RHEL-14649]
- Fix CVE-2023-34059 [RHEL-14683]
- Resolves: RHEL-15059
([ESXi][RHEL8]open-vm-tools version 12.3.5 has been released - please rebase)
- Resolves: RHEL-14649
(CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-8.10.0])
- Resolves: RHEL-14683
(CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-8.10.0])

[12.2.5-4]
- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-7012]
- Resolves: RHEL-7012
([RHEL8.10][ESXi]Latest version of open-vm-tools breaks VM backups)

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	open-vm-tools-12.3.5-2.0.1.el8.src.rpm	c099ede64ae024171d160a8044c22a54303df3901b406bcc0f152309d3d2c52b	-	ol8_x86_64_appstream
	open-vm-tools-12.3.5-2.0.1.el8.src.rpm	c099ede64ae024171d160a8044c22a54303df3901b406bcc0f152309d3d2c52b	-	ol8_x86_64_distro_builder
	open-vm-tools-12.3.5-2.0.1.el8.x86_64.rpm	3839ca1ce65eaf5dca08593fee81c09aef72f02090f710d51987c4140a4c0a37	-	ol8_x86_64_appstream
	open-vm-tools-desktop-12.3.5-2.0.1.el8.x86_64.rpm	78a58c94351aa0f161ed16276e6864a0ae7c37c4815f08698c0e2106dc3ed005	-	ol8_x86_64_appstream
	open-vm-tools-salt-minion-12.3.5-2.0.1.el8.x86_64.rpm	8c1e794987035a15d56e56b11e860edea8c7797eac766182d92cfd382c369b17	-	ol8_x86_64_appstream
	open-vm-tools-sdmp-12.3.5-2.0.1.el8.x86_64.rpm	e815d83226f75d0763d0b4c1b1d448fd63718a42feb90973dc3cc51f38c62c8f	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team