Security update for open-vm-tools SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:2604-1 Final 1 1 2023-06-22T07:49:02Z current 2023-06-22T07:49:02Z 2023-06-22T07:49:02Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for open-vm-tools This update for open-vm-tools fixes the following issues: - CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143). Bug fixes: - Fixed build problem with grpc 1.54 (bsc#1210695). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sle-micro-rancher/5.2:latest-2023-2604,Container suse/sle-micro-rancher/5.3:latest-2023-2604,Container suse/sle-micro-rancher/5.4:latest-2023-2604,Image SLES15-SP4-CHOST-BYOS-SAP-CCloud-2023-2604,Image SLES15-SP5-CHOST-BYOS-SAP-CCloud-2023-2604,SUSE-2023-2604,SUSE-SLE-Micro-5.3-2023-2604,SUSE-SLE-Micro-5.4-2023-2604,SUSE-SLE-Module-Basesystem-15-SP4-2023-2604,SUSE-SLE-Module-Basesystem-15-SP5-2023-2604,SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-2604,SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-2604,SUSE-SLE-Product-RT-15-SP3-2023-2604,SUSE-SUSE-MicroOS-5.1-2023-2604,SUSE-SUSE-MicroOS-5.2-2023-2604,openSUSE-Leap-Micro-5.3-2023-2604,openSUSE-SLE-15.4-2023-2604,openSUSE-SLE-15.5-2023-2604 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20232604-1/ Link for SUSE-SU-2023:2604-1 https://lists.suse.com/pipermail/sle-updates/2023-June/029997.html E-Mail link for SUSE-SU-2023:2604-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1210695 SUSE Bug 1210695 https://bugzilla.suse.com/1212143 SUSE Bug 1212143 https://www.suse.com/security/cve/CVE-2023-20867/ SUSE CVE CVE-2023-20867 page Container suse/sle-micro-rancher/5.2:latest Container suse/sle-micro-rancher/5.3:latest Container suse/sle-micro-rancher/5.4:latest Image SLES15-SP4-CHOST-BYOS-SAP-CCloud Image SLES15-SP5-CHOST-BYOS-SAP-CCloud SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Real Time 15 SP3 openSUSE Leap 15.4 openSUSE Leap 15.5 openSUSE Leap Micro 5.3 libvmtools0-12.2.0-150300.29.1 open-vm-tools-12.2.0-150300.29.1 libvmtools-devel-12.2.0-150300.29.1 open-vm-tools-desktop-12.2.0-150300.29.1 open-vm-tools-salt-minion-12.2.0-150300.29.1 open-vm-tools-sdmp-12.2.0-150300.29.1 libvmtools0-12.2.0-150300.29.1 as a component of Container suse/sle-micro-rancher/5.2:latest open-vm-tools-12.2.0-150300.29.1 as a component of Container suse/sle-micro-rancher/5.2:latest libvmtools0-12.2.0-150300.29.1 as a component of Container suse/sle-micro-rancher/5.3:latest open-vm-tools-12.2.0-150300.29.1 as a component of Container suse/sle-micro-rancher/5.3:latest libvmtools0-12.2.0-150300.29.1 as a component of Container suse/sle-micro-rancher/5.4:latest open-vm-tools-12.2.0-150300.29.1 as a component of Container suse/sle-micro-rancher/5.4:latest libvmtools0-12.2.0-150300.29.1 as a component of Image SLES15-SP4-CHOST-BYOS-SAP-CCloud open-vm-tools-12.2.0-150300.29.1 as a component of Image SLES15-SP4-CHOST-BYOS-SAP-CCloud libvmtools0-12.2.0-150300.29.1 as a component of Image SLES15-SP5-CHOST-BYOS-SAP-CCloud open-vm-tools-12.2.0-150300.29.1 as a component of Image SLES15-SP5-CHOST-BYOS-SAP-CCloud libvmtools0-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Micro 5.1 open-vm-tools-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Micro 5.1 libvmtools0-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Micro 5.2 open-vm-tools-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Micro 5.2 libvmtools0-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Micro 5.3 open-vm-tools-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Micro 5.3 libvmtools0-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Micro 5.4 open-vm-tools-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Micro 5.4 libvmtools-devel-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libvmtools0-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 open-vm-tools-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 open-vm-tools-salt-minion-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 open-vm-tools-sdmp-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libvmtools-devel-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libvmtools0-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 open-vm-tools-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 open-vm-tools-salt-minion-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 open-vm-tools-sdmp-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 open-vm-tools-desktop-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 open-vm-tools-desktop-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 libvmtools-devel-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 libvmtools0-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 open-vm-tools-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 open-vm-tools-desktop-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 open-vm-tools-sdmp-12.2.0-150300.29.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 libvmtools-devel-12.2.0-150300.29.1 as a component of openSUSE Leap 15.4 libvmtools0-12.2.0-150300.29.1 as a component of openSUSE Leap 15.4 open-vm-tools-12.2.0-150300.29.1 as a component of openSUSE Leap 15.4 open-vm-tools-desktop-12.2.0-150300.29.1 as a component of openSUSE Leap 15.4 open-vm-tools-salt-minion-12.2.0-150300.29.1 as a component of openSUSE Leap 15.4 open-vm-tools-sdmp-12.2.0-150300.29.1 as a component of openSUSE Leap 15.4 libvmtools-devel-12.2.0-150300.29.1 as a component of openSUSE Leap 15.5 libvmtools0-12.2.0-150300.29.1 as a component of openSUSE Leap 15.5 open-vm-tools-12.2.0-150300.29.1 as a component of openSUSE Leap 15.5 open-vm-tools-desktop-12.2.0-150300.29.1 as a component of openSUSE Leap 15.5 open-vm-tools-salt-minion-12.2.0-150300.29.1 as a component of openSUSE Leap 15.5 open-vm-tools-sdmp-12.2.0-150300.29.1 as a component of openSUSE Leap 15.5 libvmtools0-12.2.0-150300.29.1 as a component of openSUSE Leap Micro 5.3 open-vm-tools-12.2.0-150300.29.1 as a component of openSUSE Leap Micro 5.3 A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. CVE-2023-20867 Container suse/sle-micro-rancher/5.2:latest:libvmtools0-12.2.0-150300.29.1 Container suse/sle-micro-rancher/5.2:latest:open-vm-tools-12.2.0-150300.29.1 Container suse/sle-micro-rancher/5.3:latest:libvmtools0-12.2.0-150300.29.1 Container suse/sle-micro-rancher/5.3:latest:open-vm-tools-12.2.0-150300.29.1 Container suse/sle-micro-rancher/5.4:latest:libvmtools0-12.2.0-150300.29.1 Container suse/sle-micro-rancher/5.4:latest:open-vm-tools-12.2.0-150300.29.1 Image SLES15-SP4-CHOST-BYOS-SAP-CCloud:libvmtools0-12.2.0-150300.29.1 Image SLES15-SP4-CHOST-BYOS-SAP-CCloud:open-vm-tools-12.2.0-150300.29.1 Image SLES15-SP5-CHOST-BYOS-SAP-CCloud:libvmtools0-12.2.0-150300.29.1 Image SLES15-SP5-CHOST-BYOS-SAP-CCloud:open-vm-tools-12.2.0-150300.29.1 SUSE Linux Enterprise Micro 5.1:libvmtools0-12.2.0-150300.29.1 SUSE Linux Enterprise Micro 5.1:open-vm-tools-12.2.0-150300.29.1 SUSE Linux Enterprise Micro 5.2:libvmtools0-12.2.0-150300.29.1 SUSE Linux Enterprise Micro 5.2:open-vm-tools-12.2.0-150300.29.1 SUSE Linux Enterprise Micro 5.3:libvmtools0-12.2.0-150300.29.1 SUSE Linux Enterprise Micro 5.3:open-vm-tools-12.2.0-150300.29.1 SUSE Linux Enterprise Micro 5.4:libvmtools0-12.2.0-150300.29.1 SUSE Linux Enterprise Micro 5.4:open-vm-tools-12.2.0-150300.29.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libvmtools-devel-12.2.0-150300.29.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libvmtools0-12.2.0-150300.29.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:open-vm-tools-12.2.0-150300.29.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:open-vm-tools-salt-minion-12.2.0-150300.29.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:open-vm-tools-sdmp-12.2.0-150300.29.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:libvmtools-devel-12.2.0-150300.29.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:libvmtools0-12.2.0-150300.29.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:open-vm-tools-12.2.0-150300.29.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:open-vm-tools-salt-minion-12.2.0-150300.29.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:open-vm-tools-sdmp-12.2.0-150300.29.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:open-vm-tools-desktop-12.2.0-150300.29.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP5:open-vm-tools-desktop-12.2.0-150300.29.1 SUSE Linux Enterprise Real Time 15 SP3:libvmtools-devel-12.2.0-150300.29.1 SUSE Linux Enterprise Real Time 15 SP3:libvmtools0-12.2.0-150300.29.1 SUSE Linux Enterprise Real Time 15 SP3:open-vm-tools-12.2.0-150300.29.1 SUSE Linux Enterprise Real Time 15 SP3:open-vm-tools-desktop-12.2.0-150300.29.1 SUSE Linux Enterprise Real Time 15 SP3:open-vm-tools-sdmp-12.2.0-150300.29.1 openSUSE Leap 15.4:libvmtools-devel-12.2.0-150300.29.1 openSUSE Leap 15.4:libvmtools0-12.2.0-150300.29.1 openSUSE Leap 15.4:open-vm-tools-12.2.0-150300.29.1 openSUSE Leap 15.4:open-vm-tools-desktop-12.2.0-150300.29.1 openSUSE Leap 15.4:open-vm-tools-salt-minion-12.2.0-150300.29.1 openSUSE Leap 15.4:open-vm-tools-sdmp-12.2.0-150300.29.1 openSUSE Leap 15.5:libvmtools-devel-12.2.0-150300.29.1 openSUSE Leap 15.5:libvmtools0-12.2.0-150300.29.1 openSUSE Leap 15.5:open-vm-tools-12.2.0-150300.29.1 openSUSE Leap 15.5:open-vm-tools-desktop-12.2.0-150300.29.1 openSUSE Leap 15.5:open-vm-tools-salt-minion-12.2.0-150300.29.1 openSUSE Leap 15.5:open-vm-tools-sdmp-12.2.0-150300.29.1 openSUSE Leap Micro 5.3:libvmtools0-12.2.0-150300.29.1 openSUSE Leap Micro 5.3:open-vm-tools-12.2.0-150300.29.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232604-1/ https://www.suse.com/security/cve/CVE-2023-20867.html CVE-2023-20867 https://bugzilla.suse.com/1212143 SUSE Bug 1212143 https://bugzilla.suse.com/1214402 SUSE Bug 1214402