{"affected":[{"ecosystem_specific":{"binaries":[{"libvmtools0":"12.3.0-4.59.1","open-vm-tools":"12.3.0-4.59.1","open-vm-tools-desktop":"12.3.0-4.59.1","open-vm-tools-salt-minion":"12.3.0-4.59.1","open-vm-tools-sdmp":"12.3.0-4.59.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","name":"open-vm-tools","purl":"purl:rpm/suse/open-vm-tools&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"12.3.0-4.59.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libvmtools0":"12.3.0-4.59.1","open-vm-tools":"12.3.0-4.59.1","open-vm-tools-desktop":"12.3.0-4.59.1","open-vm-tools-salt-minion":"12.3.0-4.59.1","open-vm-tools-sdmp":"12.3.0-4.59.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","name":"open-vm-tools","purl":"purl:rpm/suse/open-vm-tools&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"12.3.0-4.59.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for open-vm-tools fixes the following issues:\n\nUpdate to 12.3.0 (build 22234872) (bsc#1214850)\n\n- There are no new features in the open-vm-tools 12.3.0 release. This is\n  primarily a maintenance release that addresses a few critical problems,\n  including:\n  - This release integrates CVE-2023-20900 without the need for a patch.\n    For more information on this vulnerability and its impact on VMware\n    products, see\n    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.\n  - A tools.conf configuration setting is available to temporaily direct\n    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior\n    of ignoring file systems already frozen.\n  - Building of the VMware Guest Authentication Service (VGAuth) using\n    'xml-security-c' and 'xerces-c' is being deprecated.\n  - A number of Coverity reported issues have been addressed.\n  - A number of GitHub issues and pull requests have been handled.\n    Please see the Resolves Issues section of the Release Notes.\n  - For issues resolved in this release, see the Resolved Issues section\n    of the Release Notes.\n- For complete details, see:\n  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0\n- Release Notes are available at\n  https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md\n- The granular changes that have gone into the 12.3.0 release are in the\n  ChangeLog at\n  https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog\n- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests\n- jsc#PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.\n","id":"SUSE-SU-2023:3795-1","modified":"2023-09-26T16:06:28Z","published":"2023-09-26T16:06:28Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233795-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1205927"},{"type":"REPORT","url":"https://bugzilla.suse.com/1214850"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-20900"}],"related":["CVE-2023-20900"],"summary":"Security update for open-vm-tools"}