security advisorydebianinsecure handling open-vm-tools is a package that provides Open VMware Tools for virtual machines hosted on VMware. CVE-2025-22247 . ------------------------------------------------------------------------- Debian LTS Advisory DLA-4165-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Jochen Sprickerhof May 14, 2025 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : open-vm-tools Version : 2:11.2.5-2+deb11u4 CVE ID : CVE-2025-22247 Debian Bug : 1105159 open-vm-tools is a package that provides Open VMware Tools for virtual machines hosted on VMware. CVE-2025-22247 Fixing an insecure file handling vulnerability. It allowed a malicious actor with non-administrative privileges on a guest VM to tamper the local files to trigger insecure file operations within that VM. VMSA-2025-0007 For Debian 11 bullseye, this problem has been fixed in version 2:11.2.5-2+deb11u4. We recommend that you upgrade your open-vm-tools packages. For the detailed security status of open-vm-tools please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/open-vm-tools Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Important security patch released for open-vm-tools to fix vulnerabilities in file management. Immediate upgrade advised for Ubuntu installations.. Open VMware Tools, Debian LTS, security update, file handling issue, moderate risk. . LinuxSecurity.com Team
May 14, 2025 Debian LTS