[ubuntu/noble-updates] open-vm-tools 2:13.0.0-2~ubuntu0.24.04.1 (Accepted)

[Chris Halse Rogers]

open-vm-tools (2:13.0.0-2~ubuntu0.24.04.1) noble; urgency=medium

  * Backport recent open-vm-tools release v13.0.0 (LP: #2127666)
    - For changes included in this update, see:
      https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md

open-vm-tools (2:13.0.0-2ubuntu1) questing; urgency=medium

  * SECURITY UPDATE: local privilege escalation in Service Discovery Plugin
    - debian/patches/CVE-2025-41244.patch: disable by default the execution
      of the SDMP get-versions.sh script in
      open-vm-tools/services/plugins/serviceDiscovery/serviceDiscovery.c.
    - CVE-2025-41244

open-vm-tools (2:13.0.0-2) unstable; urgency=medium

  * Upload to unstable.

open-vm-tools (2:13.0.0-1) experimental; urgency=medium

  * [6e2779c] Refreshing patches.
    Dropping patches applied upstream
  * [209b17e] Add libcrypt-dev to Build-Depends. (Closes: #1106954)
  * [2f26698] New upstream version 13.0.0

open-vm-tools (2:12.5.0-2) unstable; urgency=high

  * [910f279] Fixing an insecure file handling vulnerability.
    It allowed a malicious actor with non-administrative privileges
    on a guest VM to tamper the local files to trigger insecure file
    operations within that VM.
    VMSA-2025-0007
    CVE-2025-22247 (Closes: #1105159)

Date: 2026-03-26 11:55:10.526298+00:00
Changed-By: Renan Rodrigo <renanrodrigo at canonical.com>
Signed-By: Chris Halse Rogers <raof at ubuntu.com>
https://launchpad.net/ubuntu/+source/open-vm-tools/2:13.0.0-2~ubuntu0.24.04.1
-------------- next part --------------
Sorry, changesfile not available.