it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
- From: Moritz Muehlenhoff <jmm AT debian.org>
- To: debian-security-announce AT lists.debian.org
- Subject: [IT-SecNots] [SECURITY] [DSA 5543-1] open-vm-tools security update
- Date: Tue, 31 Oct 2023 19:29:14 +0000
- Authentication-results: mail.piratenpartei.de; dkim=none; spf=none (mail.piratenpartei.de: domain of "bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org" has no SPF policy when checking 2001:41b8:202:deb:216:36ff:fe40:4002) smtp.mailfrom="bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org"; dmarc=none
- List-archive: https://lists.debian.org/msgid-search/ZUFVigJT0o7NPRS1 AT seger.debian.org
- List-id: <debian-security-announce.lists.debian.org>
- List-url: <http://lists.debian.org/debian-security-announce/>
- Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Content-Type:MIME-Version:Message-ID:Subject:To:From:Date :Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=QJzjpOrfpUHKYIuhs01ElN1F+E7VQW21uUvk+slktgQ=; b=Zr 6B3gJm/NygTuFt075pjYxDMhhyq5BWZ6OL8bRjhmjKDPaAOYaFMSMrwddcsZwL0S9nG0Xy4UkGOxk OwvpmWeyal+QmHgCsyTwKeuWtQ4+Xpl4jHALoJ5CuGIHoK7zqWwwx8XwmAlKG8sqsJ9mk42ef0dbf 0eAHQVSXA/O79EhnH+DBGoxBGmgxJk+4xxz8CLvDL4NLWqPoMNLNfbOZ1v+dhRLW1j3mE03DQyb/H ZYbf29kcIBJYpQ4HpNLN8WgUwP0xCpPwbIAAljlvecEgWyOPcq6E0/CSuIH/dlrQv2Q0DWrmsG8hY sjxsqu0CszeQy7fd54JuwJ/2E6Ik064w==;
- Old-return-path: <jmm AT seger.debian.org>
- Priority: urgent
- Resent-date: Tue, 31 Oct 2023 19:29:39 +0000 (UTC)
- Resent-from: debian-security-announce AT lists.debian.org
- Resent-message-id: <sGq8FiQNvV.A.I0C.iWVQlB@bendel>
- Resent-sender: debian-security-announce-request AT lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-5543-1 security AT debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
October 31, 2023 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : open-vm-tools
CVE ID : CVE-2023-34058 CVE-2023-34059
Two security issues have been discovered in the Open VMware Tools, which
could result in privilege escalation.
For the oldstable distribution (bullseye), these problems have been fixed
in version 2:11.2.5-2+deb11u3.
For the stable distribution (bookworm), these problems have been fixed in
version 2:12.2.0-1+deb12u2.
We recommend that you upgrade your open-vm-tools packages.
For the detailed security status of open-vm-tools please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/open-vm-tools
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----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=VMwp
-----END PGP SIGNATURE-----
- [IT-SecNots] [SECURITY] [DSA 5543-1] open-vm-tools security update, Moritz Muehlenhoff, 31.10.2023
Archiv bereitgestellt durch MHonArc 2.6.24.