linux/meta-openembedded.git/meta-networking/recipes-support/open-vm-tools, branch scarthgap

open-vm-tools: Add entry to CVE_PRODUCT to support the product name

2026-05-21T03:27:43+00:00

- Added 'vmware:open_vm_tools' to CVE_PRODUCT to align with the NVD CPE and ensure accurate CVE reporting. Signed-off-by: Het Patel Signed-off-by: Khem Raj (cherry picked from commit 9b69587ecb92b3acb7b3092217357de9c1be14e6) Signed-off-by: Himanshu Jadon Signed-off-by: Anuj Mittal

open-vm-tools: fix CVE-2025-41244

2025-10-30T06:43:30+00:00

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-41244 Upstream-patch: https://github.com/vmware/open-vm-tools/commit/7ed196cf01f8acd09011815a605b6733894b8aab Signed-off-by: Rajeshkumar Ramasamy Signed-off-by: Anuj Mittal

open-vm-tools: fix CVE-2025-22247

2025-08-02T17:37:04+00:00

VMware Tools contains an insecure file handling vulnerability. \xa0A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-22247 Upstream patch: Backport from https://github.com/vmware/open-vm-tools/blob/CVE-2025-22247.patch/CVE-2025-22247-1230-1250-VGAuth-updates.patch Signed-off-by: Hitendra Prajapati Signed-off-by: Armin Kuster

open-vm-tools: Update status for CVE-2014-4199 and CVE-2014-4200

2024-04-30T18:00:34+00:00

Current version 12.3.5 is not affected by the issue. Affected versions: Up to (incl) 10.0.3 Signed-off-by: Khem Raj

open-vm-tools: upgrade 12.1.5 -> 12.3.5

2023-12-27T08:15:54+00:00

Release Notes: https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md ChangeLog: https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

open-vm-tools: add CVE_PRODUCT

2023-08-07T16:01:00+00:00

vmware:tools is also a valid CVE_PRODUCT for open-vm-tools, e.g., https://nvd.nist.gov/vuln/detail/CVE-2023-20867. Signed-off-by: Chen Qi Signed-off-by: Khem Raj

open-vm-tools: Security fix CVE-2023-20867

2023-06-29T21:45:34+00:00

CVE-2023-20867: A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-20867 Patch from: https://github.com/vmware/open-vm-tools/blob/CVE-2023-20867.patch/2023-20867-Remove-some-dead-code.patch Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

*.patch: add Upstream-Status to all patches

2023-06-21T16:15:20+00:00

There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now terrible: 5 (26%) meta-xfce 6 (50%) meta-perl 15 (42%) meta-webserver 21 (36%) meta-gnome 25 (57%) meta-filesystems 26 (43%) meta-initramfs 45 (45%) meta-python 47 (55%) meta-multimedia 312 (63%) meta-networking 756 (61%) meta-oe Signed-off-by: Martin Jansa Signed-off-by: Khem Raj

open-vm-tools: Fix build with 64-bit time_t

2023-01-06T19:39:11+00:00

Signed-off-by: Khem Raj

open-vm-tools: upgrade 12.1.0 -> 12.1.5

2022-12-27T17:55:18+00:00

Release Notes: https://github.com/vmware/open-vm-tools/blob/stable-12.1.5/ReleaseNotes.md Signed-off-by: Yi Zhao Signed-off-by: Khem Raj