|
From: Oliver K. <ok...@vm...> - 2017-07-29 01:19:49
|
We have released open-vm-tools 10.1.10. open-vm-tools 10.1.10 is available for download from GitHub: https://github.com/vmware/open-vm-tools/releases/tag/stable-10.1.10 This release mainly addresses these issues: * **Fix for CVE-2015-5191** Open VMware Tools (CVE-2015-5191) contained multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp. Successful exploitation may result in a local privilege escalation. The impact of this vulnerability is low for distributions which have enabled PrivateTmp for the affected service. We would like to thank Florian Weimer and Kurt Seifried of Red Hat Product Security for reporting this issue to us. For more details and changes, please refer to the release notes at https://github.com/vmware/open-vm-tools/blob/master/ReleaseNotes.md or the ChangeLog: https://github.com/vmware/open-vm-tools/blob/master/open-vm-tools/ChangeLog |