Detections
Analytics
openSUSE Security Update : open-vm-tools (openSUSE-2017-276)
medium Nessus Plugin ID 97285
Language:
Synopsis
The remote openSUSE host is missing a security update.Description
This update for open-vm-tools fixes the following issues :- Updated to 10.1.0 stable release (boo#1011057)
+ vmware-namespace-cmd command line utility.
+ gtk3 support
+ Common Agent Framework (CAF)
+ guest authentication with xmlsec1
+ FreeBSD support
+ sub-command to push updated network information to the host on demand
+ udev rules for configuring SCSI timeouts in the guest
+ fixes for Ubuntu 16.10
+ Fix for quiesced snapshot failure leaving guest file system quiesced (boo#1006796)
+ Fix for CVE-2015-5191 (boo#1007600)
- Report SLES12-SAP guest OS as SLES12 (boo#1013496)
- Remove building KMP modules. No longer needed or wanted for current releases. User space tool vmhgfs-fuse has replaced the need for vmhgfs kernel module.
- Add udev rule to increase VMware virtual disk timeout values (boo#994598)
- Fix vmtoolsd init script to run vmtoolsd in background.
(boo#971031)
+ fix originally done in SLE-11-SP4 code base by [email protected]
- Added patches for GCC 6 build failure (boo#985110)
- Update to 10.0.7-gtk3 stable branch
+ add support for gtk3, needed by the dndcp and resolutionset plugins
+ remove files generated by autoreconf
+ a few minor build fixes
- Update fixes copy-n-paste and drag-n-drop regressions (boo#978424)
- Added new vmblock-fuse.service
- Update to 10.0.7 stable branch
+ Added namespace command line utility 'vmware-namespace-cmd'.
- Compile without gtkmm support for SLES12 based environments (which do not provide gtkmm2.4)
- Update to 10.0.5 stable branch
+ [vgauth] fix timestamp check
+ [libresolutionSet.so] Add an error handler to X11 resolutionSet
+ [vmci.ko] Kill tasklet when unloading vmci module
+ [libvmbackup.so] Quiesced snapshots Skip freezing autofs mounts.
+ [vmhgfs.ko] make vmhgfs compatible with Linux kernel 4.2
- This update also addresses a suspend with systemd issue (boo#913727)
Solution
Update the affected open-vm-tools packages.See Also
https://bugzilla.opensuse.org/show_bug.cgi?id=1006796
https://bugzilla.opensuse.org/show_bug.cgi?id=1007600
https://bugzilla.opensuse.org/show_bug.cgi?id=1011057
https://bugzilla.opensuse.org/show_bug.cgi?id=1013496
https://bugzilla.opensuse.org/show_bug.cgi?id=913727
https://bugzilla.opensuse.org/show_bug.cgi?id=971031
https://bugzilla.opensuse.org/show_bug.cgi?id=978424
Plugin Details
Severity: Medium
ID: 97285
File Name: openSUSE-2017-276.nasl
Version: 3.9
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 2/21/2017
Updated: 1/19/2021
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Continuous Assessment, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Low
Base Score: 3.7
Vector: CVSS2#AV:L/AC:H/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: Medium
Base Score: 6.7
Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Vulnerability Information
CPE: p-cpe:/a:novell:opensuse:open-vm-tools-debuginfo, p-cpe:/a:novell:opensuse:open-vm-tools-desktop, cpe:/o:novell:opensuse:42.1, p-cpe:/a:novell:opensuse:libvmtools0, p-cpe:/a:novell:opensuse:libvmtools0-debuginfo, p-cpe:/a:novell:opensuse:libvmtools-devel, p-cpe:/a:novell:opensuse:open-vm-tools-desktop-debuginfo, p-cpe:/a:novell:opensuse:open-vm-tools, p-cpe:/a:novell:opensuse:open-vm-tools-debugsource
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Patch Publication Date: 2/18/2017
Reference Information
CVE: CVE-2015-5191