openSUSE Security Update : open-vm-tools (openSUSE-2017-276)

Low Nessus Plugin ID 97285


The remote openSUSE host is missing a security update.


This update for open-vm-tools fixes the following issues :

- Updated to 10.1.0 stable release (boo#1011057)

+ vmware-namespace-cmd command line utility.

+ gtk3 support

+ Common Agent Framework (CAF)

+ guest authentication with xmlsec1

+ FreeBSD support

+ sub-command to push updated network information to the host on demand

+ udev rules for configuring SCSI timeouts in the guest

+ fixes for Ubuntu 16.10

+ Fix for quiesced snapshot failure leaving guest file system quiesced (boo#1006796)

+ Fix for CVE-2015-5191 (boo#1007600)

- Report SLES12-SAP guest OS as SLES12 (boo#1013496)

- Remove building KMP modules. No longer needed or wanted for current releases. User space tool vmhgfs-fuse has replaced the need for vmhgfs kernel module.

- Add udev rule to increase VMware virtual disk timeout values (boo#994598)

- Fix vmtoolsd init script to run vmtoolsd in background.

+ fix originally done in SLE-11-SP4 code base by [email protected]

- Added patches for GCC 6 build failure (boo#985110)

- Update to 10.0.7-gtk3 stable branch

+ add support for gtk3, needed by the dndcp and resolutionset plugins

+ remove files generated by autoreconf

+ a few minor build fixes

- Update fixes copy-n-paste and drag-n-drop regressions (boo#978424)

- Added new vmblock-fuse.service

- Update to 10.0.7 stable branch

+ Added namespace command line utility 'vmware-namespace-cmd'.

- Compile without gtkmm support for SLES12 based environments (which do not provide gtkmm2.4)

- Update to 10.0.5 stable branch

+ [vgauth] fix timestamp check

+ [] Add an error handler to X11 resolutionSet

+ [vmci.ko] Kill tasklet when unloading vmci module

+ [] Quiesced snapshots Skip freezing autofs mounts.

+ [vmhgfs.ko] make vmhgfs compatible with Linux kernel 4.2

- This update also addresses a suspend with systemd issue (boo#913727)


Update the affected open-vm-tools packages.

See Also

Plugin Details

Severity: Low

ID: 97285

File Name: openSUSE-2017-276.nasl

Version: $Revision: 3.6 $

Type: local

Agent: unix

Published: 2017/02/21

Modified: 2018/01/29

Dependencies: 12634

Risk Information

Risk Factor: Low


Base Score: 3.7

Vector: CVSS2#AV:L/AC:H/Au:N/C:P/I:P/A:P


Base Score: 6.7

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:libvmtools-devel, p-cpe:/a:novell:opensuse:libvmtools0, p-cpe:/a:novell:opensuse:libvmtools0-debuginfo, p-cpe:/a:novell:opensuse:open-vm-tools, p-cpe:/a:novell:opensuse:open-vm-tools-debuginfo, p-cpe:/a:novell:opensuse:open-vm-tools-debugsource, p-cpe:/a:novell:opensuse:open-vm-tools-desktop, p-cpe:/a:novell:opensuse:open-vm-tools-desktop-debuginfo, cpe:/o:novell:opensuse:42.1

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 2017/02/18

Reference Information

CVE: CVE-2015-5191

IAVB: 2017-B-0099