SUSE-SU-2023:3507-1: Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566). This update also ships a open-vm-tools-containerinfo plugin. (jsc#PED-3421)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/open-vm-tools-debuginfoto a version that resolves this vulnerability.Fixed in 12.2.0-150300.33.1 - Upgrade
Upgrade
suse/libvmtools0to a version that resolves this vulnerability.Fixed in 12.2.0-150300.33.1 - Upgrade
Upgrade
suse/open-vm-tools-sdmp-debuginfoto a version that resolves this vulnerability.Fixed in 12.2.0-150300.33.1 - Upgrade
Upgrade
suse/open-vm-tools-debugsourceto a version that resolves this vulnerability.Fixed in 12.2.0-150300.33.1 - Upgrade
Upgrade
suse/libvmtools-develto a version that resolves this vulnerability.Fixed in 12.2.0-150300.33.1 - Upgrade
Upgrade
suse/open-vm-tools-containerinfoto a version that resolves this vulnerability.Fixed in 12.2.0-150300.33.1 - Upgrade
Upgrade
suse/libvmtools0-debuginfoto a version that resolves this vulnerability.Fixed in 12.2.0-150300.33.1 - Upgrade
Upgrade
suse/open-vm-tools-desktopto a version that resolves this vulnerability.Fixed in 12.2.0-150300.33.1 - Upgrade
Upgrade
suse/open-vm-tools-sdmpto a version that resolves this vulnerability.Fixed in 12.2.0-150300.33.1 - Upgrade
Upgrade
suse/open-vm-tools-desktop-debuginfoto a version that resolves this vulnerability.Fixed in 12.2.0-150300.33.1 - Upgrade
Upgrade
suse/open-vm-toolsto a version that resolves this vulnerability.Fixed in 12.2.0-150300.33.1 - Upgrade
Upgrade
suse/open-vm-tools-containerinfo-debuginfoto a version that resolves this vulnerability.Fixed in 12.2.0-150300.33.1 - Upgrade
Upgrade
suse/open-vm-tools-salt-minionto a version that resolves this vulnerability.Fixed in 12.2.0-150300.33.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2023-3507 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.3-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.4-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.1-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.2-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.3-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.4-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.4-2023-3507=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2023-3507=1