Summary
[12.3.5-2.0.1.el8.1]
- Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968]
- Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019]
- Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 21819156]
[12.3.5-2.el8.1]
- ovt-SDMP-Service-Discovery-Plugin.patch [RHEL-117388]
- Resolves: RHEL-117388
([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-8.10.z])
[12.3.5-2]
- ovt-Restart-tools-on-failure.patch [RHEL-17683]
- Resolves: RHEL-17683
(Add Restart=on-failure to vmtoolsd.service [rhel-8])
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | open-vm-tools | 0:12.3.5-2.0.1.el8_10.1 |
| Oracle Linux · 8 | open-vm-tools-desktop | 0:12.3.5-2.0.1.el8_10.1 |
| Oracle Linux · 8 | open-vm-tools-salt-minion | 0:12.3.5-2.0.1.el8_10.1 |
| Oracle Linux · 8 | open-vm-tools-sdmp | 0:12.3.5-2.0.1.el8_10.1 |
Vulnerabilities 1
-
High 7.8
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may explo…
KEV Oct 30, 2025