[ubuntu/noble-proposed] open-vm-tools 2:13.0.0-2~ubuntu0.24.04.1 (Accepted)

[Renan Rodrigo]

open-vm-tools (2:13.0.0-2~ubuntu0.24.04.1) noble; urgency=medium

  * Backport recent open-vm-tools release v13.0.0 (LP: #2127666)
    - For changes included in this update, see:
      https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md

open-vm-tools (2:13.0.0-2ubuntu1) questing; urgency=medium

  * SECURITY UPDATE: local privilege escalation in Service Discovery Plugin
    - debian/patches/CVE-2025-41244.patch: disable by default the execution
      of the SDMP get-versions.sh script in
      open-vm-tools/services/plugins/serviceDiscovery/serviceDiscovery.c.
    - CVE-2025-41244

open-vm-tools (2:13.0.0-2) unstable; urgency=medium

  * Upload to unstable.

open-vm-tools (2:13.0.0-1) experimental; urgency=medium

  * [6e2779c] Refreshing patches.
    Dropping patches applied upstream
  * [209b17e] Add libcrypt-dev to Build-Depends. (Closes: #1106954)
  * [2f26698] New upstream version 13.0.0

open-vm-tools (2:12.5.0-2) unstable; urgency=high

  * [910f279] Fixing an insecure file handling vulnerability.
    It allowed a malicious actor with non-administrative privileges
    on a guest VM to tamper the local files to trigger insecure file
    operations within that VM.
    VMSA-2025-0007
    CVE-2025-22247 (Closes: #1105159)

Date: Wed, 25 Mar 2026 16:34:10 -0300
Changed-By: Renan Rodrigo <rr at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/open-vm-tools/2:13.0.0-2~ubuntu0.24.04.1
-------------- next part --------------
Format: 1.8
Date: Wed, 25 Mar 2026 16:34:10 -0300
Source: open-vm-tools
Built-For-Profiles: noudeb
Architecture: source
Version: 2:13.0.0-2~ubuntu0.24.04.1
Distribution: noble
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Renan Rodrigo <rr at ubuntu.com>
Closes: 1105159 1106954
Launchpad-Bugs-Fixed: 2127666
Changes:
 open-vm-tools (2:13.0.0-2~ubuntu0.24.04.1) noble; urgency=medium
 .
   * Backport recent open-vm-tools release v13.0.0 (LP: #2127666)
     - For changes included in this update, see:
       https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
 .
 open-vm-tools (2:13.0.0-2ubuntu1) questing; urgency=medium
 .
   * SECURITY UPDATE: local privilege escalation in Service Discovery Plugin
     - debian/patches/CVE-2025-41244.patch: disable by default the execution
       of the SDMP get-versions.sh script in
       open-vm-tools/services/plugins/serviceDiscovery/serviceDiscovery.c.
     - CVE-2025-41244
 .
 open-vm-tools (2:13.0.0-2) unstable; urgency=medium
 .
   * Upload to unstable.
 .
 open-vm-tools (2:13.0.0-1) experimental; urgency=medium
 .
   * [6e2779c] Refreshing patches.
     Dropping patches applied upstream
   * [209b17e] Add libcrypt-dev to Build-Depends. (Closes: #1106954)
   * [2f26698] New upstream version 13.0.0
 .
 open-vm-tools (2:12.5.0-2) unstable; urgency=high
 .
   * [910f279] Fixing an insecure file handling vulnerability.
     It allowed a malicious actor with non-administrative privileges
     on a guest VM to tamper the local files to trigger insecure file
     operations within that VM.
     VMSA-2025-0007
     CVE-2025-22247 (Closes: #1105159)
Checksums-Sha1:
 c3a82bb4592b21a5f060e9e4783e9e30e43afcc6 3118 open-vm-tools_13.0.0-2~ubuntu0.24.04.1.dsc
 cf8d81b42e0ee19826ef4f845cf37f73703820b3 1809656 open-vm-tools_13.0.0.orig.tar.xz
 ecab1f8a7e376e655ee435b0c3462b78c27c2f62 36752 open-vm-tools_13.0.0-2~ubuntu0.24.04.1.debian.tar.xz
 73e3905158541a9dbc2cfd82f14047e97be09736 7018 open-vm-tools_13.0.0-2~ubuntu0.24.04.1_source.buildinfo
Checksums-Sha256:
 4b7a0b359719c7d3d8f8f56569c555e5ef4aac57cf1b71c9c72ffe0416c2347d 3118 open-vm-tools_13.0.0-2~ubuntu0.24.04.1.dsc
 2f612a5e6c4bfc085b445f6f55b174e20daf6f97127892bfad4dbbfa28c43c0f 1809656 open-vm-tools_13.0.0.orig.tar.xz
 a62c47dcc4de872c8d760a611f98be086ecaf12ff695c847517ff3e6b37942ee 36752 open-vm-tools_13.0.0-2~ubuntu0.24.04.1.debian.tar.xz
 04c4bb7943b7ffde94a28af5024a86996ed99178fded6cb253f8a1a08859d02f 7018 open-vm-tools_13.0.0-2~ubuntu0.24.04.1_source.buildinfo
Files:
 9a1bf2228feefa65a24d6e1ff47d038d 3118 admin optional open-vm-tools_13.0.0-2~ubuntu0.24.04.1.dsc
 b0c00f6f95f0e622c330c47c30c63288 1809656 admin optional open-vm-tools_13.0.0.orig.tar.xz
 bd6c106cb7fe9abea15b9e60db5ba38f 36752 admin optional open-vm-tools_13.0.0-2~ubuntu0.24.04.1.debian.tar.xz
 18f2e3d67923d0ed76adf404305d4c3d 7018 admin optional open-vm-tools_13.0.0-2~ubuntu0.24.04.1_source.buildinfo
Original-Maintainer: Bernd Zeimetz <bzed at debian.org>
Vcs-Git: https://git.launchpad.net/~rr/ubuntu/+source/open-vm-tools
Vcs-Git-Commit: 8ba490114dba16809c6e5d4b0ec18dae60f8c491
Vcs-Git-Ref: refs/heads/noble-backport