High ELSA-2023-5312 1 CVE

Important: open-vm-tools security update (Oracle Linux 8)

Published Sep 22, 2023 · Updated Sep 22, 2023

Ecosystem: Oracle Linux

Summary

[12.1.5-2.0.2.3]
- Resolves: RHEL-4584
(CVE-2023-20900 open-vm-tools: SAML token signature bypass)

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 8	open-vm-tools	0:12.1.5-2.0.2.el8_8.3
Oracle Linux · 8	open-vm-tools-desktop	0:12.1.5-2.0.2.el8_8.3
Oracle Linux · 8	open-vm-tools-salt-minion	0:12.1.5-2.0.2.el8_8.3
Oracle Linux · 8	open-vm-tools-sdmp	0:12.1.5-2.0.2.el8_8.3

Vulnerabilities 1

High 7.1

CVE-2023-20900

A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vspher…

open-vm-tools open-vm-tools open-vm-tools Debian Ubuntu Alpine

Aug 31, 2023