Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | open-vm-tools | 0:12.3.5-2.el8_10.2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | open-vm-tools-debuginfo | 0:12.3.5-2.el8_10.2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | open-vm-tools-debugsource | 0:12.3.5-2.el8_10.2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | open-vm-tools-desktop | 0:12.3.5-2.el8_10.2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | open-vm-tools-desktop-debuginfo | 0:12.3.5-2.el8_10.2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | open-vm-tools-salt-minion | 0:12.3.5-2.el8_10.2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | open-vm-tools-sdmp | 0:12.3.5-2.el8_10.2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | open-vm-tools-sdmp-debuginfo | 0:12.3.5-2.el8_10.2 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | open-vm-tools-test-debuginfo | 0:12.3.5-2.el8_10.2 |
Vulnerabilities 1
-
Medium 6.1
Insecure file handling vulnerability
VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM.
References
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhba-2026_0860.json
-
report
https://access.redhat.com/security/cve/CVE-2025-22247
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2364261
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-22247
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-22247
-
article
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683