[ubuntu/noble-proposed] open-vm-tools 2:12.5.0-1~ubuntu0.24.04.1 (Accepted)
Renan Rodrigo
renanrodrigo at canonical.com
Tue Sep 9 15:45:39 UTC 2025
open-vm-tools (2:12.5.0-1~ubuntu0.24.04.1) noble; urgency=medium
* Backport recent open-vm-tools release v12.5.0 (LP: #2122116)
- For changes included in this update, see:
https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
open-vm-tools (2:12.5.0-1ubuntu0.1) plucky-security; urgency=medium
* SECURITY UPDATE: insecure file handling vulnerability
- debian/patches/CVE-2025-22247.patch: properly check symlinks and path
traversal chars in open-vm-tools/vgauth/common/VGAuthUtil.c,
open-vm-tools/vgauth/common/VGAuthUtil.h,
open-vm-tools/vgauth/common/prefs.h,
open-vm-tools/vgauth/common/usercheck.c,
open-vm-tools/vgauth/serviceImpl/alias.c,
open-vm-tools/vgauth/serviceImpl/service.c,
open-vm-tools/vgauth/serviceImpl/serviceInt.h.
- CVE-2025-22247
open-vm-tools (2:12.5.0-1) unstable; urgency=medium
* Update to 12.5.0, full release notes can be found at
https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
- d/copyright: update to 12.5.0
- d/copyright: add missing path element to fix superfluous-file-pattern
- d/copyright: bsd files gone since 10.2.5
- d/*.lintian-overrides: fix paths
Date: Fri, 05 Sep 2025 10:01:22 -0300
Changed-By: Renan Rodrigo <renanrodrigo at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Bryce Harrington <bryce at bryceharrington.org>
https://launchpad.net/ubuntu/+source/open-vm-tools/2:12.5.0-1~ubuntu0.24.04.1
-------------- next part --------------
Format: 1.8
Date: Fri, 05 Sep 2025 10:01:22 -0300
Source: open-vm-tools
Built-For-Profiles: noudeb
Architecture: source
Version: 2:12.5.0-1~ubuntu0.24.04.1
Distribution: noble
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Renan Rodrigo <renanrodrigo at canonical.com>
Launchpad-Bugs-Fixed: 2122116
Changes:
open-vm-tools (2:12.5.0-1~ubuntu0.24.04.1) noble; urgency=medium
.
* Backport recent open-vm-tools release v12.5.0 (LP: #2122116)
- For changes included in this update, see:
https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
.
open-vm-tools (2:12.5.0-1ubuntu0.1) plucky-security; urgency=medium
.
* SECURITY UPDATE: insecure file handling vulnerability
- debian/patches/CVE-2025-22247.patch: properly check symlinks and path
traversal chars in open-vm-tools/vgauth/common/VGAuthUtil.c,
open-vm-tools/vgauth/common/VGAuthUtil.h,
open-vm-tools/vgauth/common/prefs.h,
open-vm-tools/vgauth/common/usercheck.c,
open-vm-tools/vgauth/serviceImpl/alias.c,
open-vm-tools/vgauth/serviceImpl/service.c,
open-vm-tools/vgauth/serviceImpl/serviceInt.h.
- CVE-2025-22247
.
open-vm-tools (2:12.5.0-1) unstable; urgency=medium
.
* Update to 12.5.0, full release notes can be found at
https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
- d/copyright: update to 12.5.0
- d/copyright: add missing path element to fix superfluous-file-pattern
- d/copyright: bsd files gone since 10.2.5
- d/*.lintian-overrides: fix paths
Checksums-Sha1:
9463da6d934f144f0ef31cf7c6d9dc61922ad7ee 3083 open-vm-tools_12.5.0-1~ubuntu0.24.04.1.dsc
8fe250a773523769c696f315e2bd8cee8ab45816 38496 open-vm-tools_12.5.0-1~ubuntu0.24.04.1.debian.tar.xz
f4fc6bb754589dc72a437faf652441861a110acb 26329 open-vm-tools_12.5.0-1~ubuntu0.24.04.1_source.buildinfo
Checksums-Sha256:
5116a8360e0b2838d6e1a01daf86c75026da58fed0429065a201d1b4dfd8fabe 3083 open-vm-tools_12.5.0-1~ubuntu0.24.04.1.dsc
1dfa3edcd485a5a02cd82a50b46fc67c0d87160c24b7bc9e0462e1567c4931cf 38496 open-vm-tools_12.5.0-1~ubuntu0.24.04.1.debian.tar.xz
3bfa75eb0a09cec436b0c99b3fa30ffa29bb8defd0d86dc771b4ecdd3b1193ac 26329 open-vm-tools_12.5.0-1~ubuntu0.24.04.1_source.buildinfo
Files:
4205d2fd956dde8d63187fdc991463f9 3083 admin optional open-vm-tools_12.5.0-1~ubuntu0.24.04.1.dsc
09ea8add348dfae7dffd8b1529069eeb 38496 admin optional open-vm-tools_12.5.0-1~ubuntu0.24.04.1.debian.tar.xz
c26518fa8f9523dc1de698df051af552 26329 admin optional open-vm-tools_12.5.0-1~ubuntu0.24.04.1_source.buildinfo
Original-Maintainer: Bernd Zeimetz <bzed at debian.org>
Vcs-Git: https://git.launchpad.net/~bryce/ubuntu/+source/open-vm-tools
Vcs-Git-Commit: 3d145d3cd3e5953cde4ccc2c86abee44bd6ab0a4
Vcs-Git-Ref: refs/heads/rr.backport-lp2122116
More information about the noble-changes
mailing list