[ubuntu/noble-proposed] open-vm-tools 2:12.5.0-1~ubuntu0.24.04.1 (Accepted)

Renan Rodrigo renanrodrigo at canonical.com
Tue Sep 9 15:45:39 UTC 2025


open-vm-tools (2:12.5.0-1~ubuntu0.24.04.1) noble; urgency=medium

  * Backport recent open-vm-tools release v12.5.0 (LP: #2122116)
    - For changes included in this update, see:
      https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md

open-vm-tools (2:12.5.0-1ubuntu0.1) plucky-security; urgency=medium

  * SECURITY UPDATE: insecure file handling vulnerability
    - debian/patches/CVE-2025-22247.patch: properly check symlinks and path
      traversal chars in open-vm-tools/vgauth/common/VGAuthUtil.c,
      open-vm-tools/vgauth/common/VGAuthUtil.h,
      open-vm-tools/vgauth/common/prefs.h,
      open-vm-tools/vgauth/common/usercheck.c,
      open-vm-tools/vgauth/serviceImpl/alias.c,
      open-vm-tools/vgauth/serviceImpl/service.c,
      open-vm-tools/vgauth/serviceImpl/serviceInt.h.
    - CVE-2025-22247

open-vm-tools (2:12.5.0-1) unstable; urgency=medium

  * Update to 12.5.0, full release notes can be found at
    https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
    - d/copyright: update to 12.5.0
    - d/copyright: add missing path element to fix superfluous-file-pattern
    - d/copyright: bsd files gone since 10.2.5
    - d/*.lintian-overrides: fix paths

Date: Fri, 05 Sep 2025 10:01:22 -0300
Changed-By: Renan Rodrigo <renanrodrigo at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Bryce Harrington <bryce at bryceharrington.org>
https://launchpad.net/ubuntu/+source/open-vm-tools/2:12.5.0-1~ubuntu0.24.04.1
-------------- next part --------------
Format: 1.8
Date: Fri, 05 Sep 2025 10:01:22 -0300
Source: open-vm-tools
Built-For-Profiles: noudeb
Architecture: source
Version: 2:12.5.0-1~ubuntu0.24.04.1
Distribution: noble
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Renan Rodrigo <renanrodrigo at canonical.com>
Launchpad-Bugs-Fixed: 2122116
Changes:
 open-vm-tools (2:12.5.0-1~ubuntu0.24.04.1) noble; urgency=medium
 .
   * Backport recent open-vm-tools release v12.5.0 (LP: #2122116)
     - For changes included in this update, see:
       https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
 .
 open-vm-tools (2:12.5.0-1ubuntu0.1) plucky-security; urgency=medium
 .
   * SECURITY UPDATE: insecure file handling vulnerability
     - debian/patches/CVE-2025-22247.patch: properly check symlinks and path
       traversal chars in open-vm-tools/vgauth/common/VGAuthUtil.c,
       open-vm-tools/vgauth/common/VGAuthUtil.h,
       open-vm-tools/vgauth/common/prefs.h,
       open-vm-tools/vgauth/common/usercheck.c,
       open-vm-tools/vgauth/serviceImpl/alias.c,
       open-vm-tools/vgauth/serviceImpl/service.c,
       open-vm-tools/vgauth/serviceImpl/serviceInt.h.
     - CVE-2025-22247
 .
 open-vm-tools (2:12.5.0-1) unstable; urgency=medium
 .
   * Update to 12.5.0, full release notes can be found at
     https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
     - d/copyright: update to 12.5.0
     - d/copyright: add missing path element to fix superfluous-file-pattern
     - d/copyright: bsd files gone since 10.2.5
     - d/*.lintian-overrides: fix paths
Checksums-Sha1:
 9463da6d934f144f0ef31cf7c6d9dc61922ad7ee 3083 open-vm-tools_12.5.0-1~ubuntu0.24.04.1.dsc
 8fe250a773523769c696f315e2bd8cee8ab45816 38496 open-vm-tools_12.5.0-1~ubuntu0.24.04.1.debian.tar.xz
 f4fc6bb754589dc72a437faf652441861a110acb 26329 open-vm-tools_12.5.0-1~ubuntu0.24.04.1_source.buildinfo
Checksums-Sha256:
 5116a8360e0b2838d6e1a01daf86c75026da58fed0429065a201d1b4dfd8fabe 3083 open-vm-tools_12.5.0-1~ubuntu0.24.04.1.dsc
 1dfa3edcd485a5a02cd82a50b46fc67c0d87160c24b7bc9e0462e1567c4931cf 38496 open-vm-tools_12.5.0-1~ubuntu0.24.04.1.debian.tar.xz
 3bfa75eb0a09cec436b0c99b3fa30ffa29bb8defd0d86dc771b4ecdd3b1193ac 26329 open-vm-tools_12.5.0-1~ubuntu0.24.04.1_source.buildinfo
Files:
 4205d2fd956dde8d63187fdc991463f9 3083 admin optional open-vm-tools_12.5.0-1~ubuntu0.24.04.1.dsc
 09ea8add348dfae7dffd8b1529069eeb 38496 admin optional open-vm-tools_12.5.0-1~ubuntu0.24.04.1.debian.tar.xz
 c26518fa8f9523dc1de698df051af552 26329 admin optional open-vm-tools_12.5.0-1~ubuntu0.24.04.1_source.buildinfo
Original-Maintainer: Bernd Zeimetz <bzed at debian.org>
Vcs-Git: https://git.launchpad.net/~bryce/ubuntu/+source/open-vm-tools
Vcs-Git-Commit: 3d145d3cd3e5953cde4ccc2c86abee44bd6ab0a4
Vcs-Git-Ref: refs/heads/rr.backport-lp2122116


More information about the noble-changes mailing list