SUSE-SU-2023:3505-1

UNKNOWN

Security update for open-vm-tools

Published Aug 31, 2023

Modified 2 years ago

Fix available

Details

This update for open-vm-tools fixes the following issues:

CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143).
CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566).

Affected Packages

libvmtools-devel

SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Server 15 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP2

Fixed in:

11.3.5-150200.5.16.16.1

libvmtools0

SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Server 15 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP2

Fixed in:

11.3.5-150200.5.16.16.1

open-vm-tools

SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Server 15 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP2

Fixed in:

11.3.5-150200.5.16.16.1

open-vm-tools-desktop

SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Server 15 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP2

Fixed in:

11.3.5-150200.5.16.16.1

open-vm-tools-sdmp

SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Server 15 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP2

Fixed in:

11.3.5-150200.5.16.16.1

References

REPORT

https://bugzilla.suse.com/1212143

REPORT

https://bugzilla.suse.com/1214566

WEB

https://www.suse.com/security/cve/CVE-2023-20867

WEB

https://www.suse.com/security/cve/CVE-2023-20900

ADVISORY