Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | open-vm-tools | 0:13.0.0-1.el9_7.1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | open-vm-tools-debuginfo | 0:13.0.0-1.el9_7.1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | open-vm-tools-debugsource | 0:13.0.0-1.el9_7.1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | open-vm-tools-desktop | 0:13.0.0-1.el9_7.1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | open-vm-tools-desktop-debuginfo | 0:13.0.0-1.el9_7.1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | open-vm-tools-salt-minion | 0:13.0.0-1.el9_7.1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | open-vm-tools-sdmp | 0:13.0.0-1.el9_7.1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | open-vm-tools-sdmp-debuginfo | 0:13.0.0-1.el9_7.1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | open-vm-tools-test | 0:13.0.0-1.el9_7.1 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | open-vm-tools-test-debuginfo | 0:13.0.0-1.el9_7.1 |
Vulnerabilities 1
-
Medium 6.1
Insecure file handling vulnerability
VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.
References
-
article
https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.7_release_notes/index
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_20841.json
-
report
https://access.redhat.com/security/cve/CVE-2025-22247
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2364261
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-22247
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-22247
-
article
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683