Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Oracle Linux 9 ELSA-2022-6358 Critical: Open-VM-Tools Privilege Escalation

oracle
Calendar Grey September 7, 2022
Oracle Linux Logo Esm H88
The new Oracle Linux advisory ELSA-2022-6358 introduces crucial security enhancements for open-vm-tools, addressing critical vulnerabilities related to privilege escalation.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[11.3.5-1.0.1.el9_0.1] - Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 21819156] [11.3.5-1.el9_0.1] - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119285] - Resolves: bz#2119285 (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-9.0.0.z])

SRPMs

https://oss.oracle.com:443/ol9/SRPMS-updates/open-vm-tools-11.3.5-1.0.1.el9_0.1.src.rpm

x86_64

open-vm-tools-11.3.5-1.0.1.el9_0.1.x86_64.rpm open-vm-tools-desktop-11.3.5-1.0.1.el9_0.1.x86_64.rpm open-vm-tools-sdmp-11.3.5-1.0.1.el9_0.1.x86_64.rpm open-vm-tools-test-11.3.5-1.0.1.el9_0.1.x86_64.rpm

aarch64

open-vm-tools-11.3.5-1.0.1.el9_0.1.aarch64.rpm open-vm-tools-desktop-11.3.5-1.0.1.el9_0.1.aarch64.rpm open-vm-tools-test-11.3.5-1.0.1.el9_0.1.aarch64.rpm

Severity
critical
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2022-31676

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here