Changelog for
open-vm-tools-desktop-12.3.5-1.fc38.x86_64.rpm :
* Wed Nov 08 2023 John Wolfe
- 12.3.5-1- Package new upstream version of open-vm-tools-12.3.5-22544099. . fix for CVE-2023-34058 - another SAML token signature bypass vulnerability. . fix for CVE-2023-34059 - a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. . address https://github.com/vmware/open-vm-tools/issues/310- Remove CVE-2023-34058.patch and CVE-2023-34059.patch as no longer needed.
* Mon Oct 30 2023 John Wolfe - 12.3.0-3- Address CVE-2023-34058 - BZ 2246963 - SAML token signature token bypass.- Address CVE-2023-34059 - BZ 2246962 - vmware-user-suid-wrapper file descriptor hijack vulnerability
* Thu Oct 05 2023 Peter Robinson - 12.3.0-2- Use fuse3 on new RHEL
* Sat Sep 09 2023 John Wolfe - 12.3.0-1- Package new upstream version of open-vm-tools-12.3.0-22234872. - Fix for CVE-2023-20900 - a SAML token signature bypass vulnerability. - Fix for CVE-2023-20867 - an Authentication Bypass vulnerability. - Linux quiesced snapshots have been updated to avoid intermittent hangs of the vmtoolsd process. - File systems prefrozen by custom quiescing scripts must be listed on the \"excludedFileSystems\" setting in the \"vmbackup\" section of the tools.conf file. - A tools.conf configuration setting is available to temporaily direct Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior of ignoring file systems already frozen. - A number of Coverity reported issues have been addressed. - A number of GitHub issues and pull requests have been handled.
* Thu Jul 20 2023 Fedora Release Engineering - 12.1.5-4- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jan 19 2023 Fedora Release Engineering - 12.1.5-3- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Sun Jan 01 2023 John Wolfe - 12.1.5-2- Update the copyright date in the open-vm-tools.spec file.
* Sun Jan 01 2023 John Wolfe - 12.1.5-1- Package new upstream version of open-vm-tools-12.1.5-20735119. - The deployPkg plugin may prematurely reboot the guest VM before cloud-init has completed user data setup - A SIGSEGV may be encountered when a non-quiescing snapshot times out. - A number of Coverity reported issues have been addressed.
* Thu Sep 08 2022 John Wolfe - 12.1.0-1- Package new upstream version open-vm-tools-12.1.0-20219665. . fix for CVE-2022-31676 - a local privilege escalation vulnerability. . address a number of Coverity reported issues.- Remove patch 1205-Properly-check-authorization-on-incoming-guestOps-re.patch as no longer needed.
* Sun Sep 04 2022 John Wolfe - 12.0.5-3- Add patch 1205-Properly-check-authorization-on-incoming-guestOps-re.patch to fix CVE-2022-31676 in open-vm-tools 12.0.5 tracked in PR 120976.- Correct build requirements - replace systemd-rpm-macros with systemd_udev.
* Fri Jul 22 2022 Fedora Release Engineering - 12.0.5-2- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon May 30 2022 John Wolfe - 12.0.5-1- Package new upstream version open-vm-tools-12.0.5-19716617. - Maintenance release addressing some potential FTBFS issues.- Remove asyncsocket.patch as no longer needed.
* Mon May 09 2022 John Wolfe - 12.0.0-1- Package new upstream version open-vm-tools-12.0.0-19345655.- Enable build of the new salt-minion plugin package.- Deferring enablement of new containerInfo plugin until a later revision.- Build with fuse3 on Fedora.
* Thu Feb 24 2022 John Wolfe - 11.3.5-1- Package new upstream version open-vm-tools-11.3.5-18557794.
* Wed Feb 09 2022 John Wolfe - 11.3.0-6- Refactored asyncsocket.c patch to use size_t size and index variables.
* Tue Feb 01 2022 John Wolfe - 11.3.0-5- Address (fix) strings or array bounds warnings from GCC 12.0.x.
* Thu Jan 20 2022 Fedora Release Engineering - 11.3.0-4- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
