Hitendra Prajapati 21e370fd3c open-vm-tools: fix CVE-2025-22247 ...

VMware Tools contains an insecure file handling vulnerability.
\xa0A malicious actor with non-administrative privileges on a
guest VM may tamper the local files to trigger insecure file
operations within that VM.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-22247

Upstream patch: Backport from https://github.com/vmware/open-vm-tools/blob/CVE-2025-22247.patch/CVE-2025-22247-1230-1250-VGAuth-updates.patch

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>

2025-08-02 13:37:04 -04:00

..

aoetools

*.patch: add Upstream-Status to all patches

2023-06-21 09:15:20 -07:00

arptables

recipes: drop ${SRCPV} usage

2024-02-09 09:52:12 -08:00

bmon

bmon: fix PV

2021-12-10 09:11:56 -08:00

bridge-utils

recipes: Update LICENSE variable to use SPDX license identifiers

2022-03-04 17:41:45 -08:00

celt051

recipes: drop ${SRCPV} usage

2024-02-09 09:52:12 -08:00

chrony

chrony: use inherit_defer for conditional inherit of useradd

2025-06-23 16:57:53 -04:00

cifs

cifs-utils: upgrade 6.15 -> 7.0

2022-08-15 16:27:53 -07:00

cim-schema

Convert to new override syntax

2021-08-03 10:21:25 -07:00

curlpp

curlpp: Remove references to buildpaths e.g. TMPDIR

2023-05-23 08:48:18 -07:00

dnsmasq

dnsmasq: Upgrade 2.89 -> 2.90

2024-02-26 08:13:22 -08:00

dovecot

dovecot: upgrade 2.3.20 -> 2.3.21

2023-09-20 15:34:02 -07:00

drbd

drbd-utils: Fix a udev rule reproducibility

2024-03-05 11:02:04 -08:00

dropwatch

unionfs-fuse, dropwatch, postgresql, yasm, multipath-tools, python3-pybind11: add missing Upstream-Status

2024-03-17 13:10:09 -07:00

esmtp

*.patch: add Upstream-Status to all patches

2023-06-21 09:15:20 -07:00

ettercap

ettercap: Do not generate #line directives with bison/flex

2023-05-28 16:35:00 -07:00

fetchmail

fetchmail: disable rpath to fix buildpaths warning.

2025-04-16 20:30:24 -04:00

fping

.patch: fix Upstream-Status formatting issues reported by patchreview tool from oe-core

2023-01-27 17:06:52 -08:00

fwknop

fwknop: Specify target locations of gpg and wget

2025-04-16 20:30:24 -04:00

geoip

recipes: Update LICENSE variable to use SPDX license identifiers

2022-03-04 17:41:45 -08:00

htpdate

htpdate: upgrade 1.3.6 -> 1.3.7

2023-02-16 19:33:29 -08:00

http-parser

remove unused AUTHOR variable

2023-08-03 09:14:20 -07:00

ifenslave

ifenslave: upgrade 2.13 -> 2.14

2023-12-18 22:17:19 -08:00

ifmetric

*.patch: add Upstream-Status to all patches

2023-06-21 09:15:20 -07:00

iftop

recipes: Update LICENSE variable to use SPDX license identifiers

2022-03-04 17:41:45 -08:00

ipcalc

ipcalc: upgrade 1.0.2 -> 1.0.3

2023-06-14 09:41:35 -07:00

ipvsadm

ipvsadm: Pass build environment cflags to compiler

2023-05-26 18:36:56 -07:00

libconfuse

recipes: Update SRC_URI branch and protocols

2021-11-03 06:57:49 -07:00

libcpr

libcpr: add new recipe

2024-03-26 14:00:53 -07:00

libesmtp

gnome-tweaks, networkmanager-fortisslvpn, libesmtp, json-schema-validator, python3-pybluez, python3-pynetlinux, apache2: Fix Malformed Upstream-Status

2023-09-27 14:22:09 -07:00

libexosip2

libexosip2: package binaries in a separate package

2023-11-22 16:39:50 -08:00

libldb

libldb: upgrade 2.8.0 -> 2.8.1

2024-10-06 06:56:37 -04:00

libmaxminddb

libmaxminddb: add new recipe

2020-11-09 20:49:52 -08:00

libmemcached

*.patch: add Upstream-Status to all patches

2023-06-21 09:15:20 -07:00

libosip2

libosip2: add recipe

2023-10-17 21:42:56 -07:00

libtalloc

Use PYTHON_SITEPACKAGES_DIR instead of hard-coded site-packages directory path

2024-04-21 10:52:39 -07:00

libtdb

Use PYTHON_SITEPACKAGES_DIR instead of hard-coded site-packages directory path

2024-04-21 10:52:39 -07:00

libtevent

libtevent: upgrade 0.16.0 -> 0.16.1

2024-06-02 14:57:06 -04:00

linux-atm

*.patch: add Upstream-Status to all patches

2023-06-21 09:15:20 -07:00

lksctp-tools

recipes: drop ${SRCPV} usage

2024-02-09 09:52:12 -08:00

lowpan-tools

recipes: drop ${SRCPV} usage

2024-02-09 09:52:12 -08:00

macchanger

*.patch: add Upstream-Status to all patches

2023-06-21 09:15:20 -07:00

mctp

mctp: upgrade 1.0 -> 1.1

2023-04-17 09:53:31 -07:00

mdio-tools

mdio-tools: fix mdio-netlink kernel module reproducibility

2025-02-04 14:41:20 -08:00

memcached

memcached: Upgrade to 1.6.17

2022-08-30 00:14:58 -07:00

mtr

recipes: Update LICENSE variable to use SPDX license identifiers

2022-03-04 17:41:45 -08:00

nbd

nbd: update 3.20 -> 3.24

2022-05-24 08:39:45 -07:00

nbdkit

nbdkit: Remove buildpaths from binaries

2023-05-23 08:48:18 -07:00

ncp

meta-networking: fix Upstream-Status format

2023-02-24 08:45:44 -08:00

ndisc6

ndisc6: Fix reproducible build

2024-12-15 14:14:43 -05:00

netcat

recipes: Drop remaining PR values from recipes

2024-03-17 13:10:10 -07:00

netcf

netcf: Fix build with latest gnulib

2024-03-09 10:55:22 -08:00

netperf

recipes: drop ${SRCPV} usage

2024-02-09 09:52:12 -08:00

netsniff-ng

meta-networking: Drop broken BBCLASSEXTEND variants

2023-10-24 09:08:45 -07:00

nis

ypbind-mt: Upgrade to 2.7.2

2022-08-30 00:14:58 -07:00

ntimed

recipes: drop ${SRCPV} usage

2024-02-09 09:52:12 -08:00

ntopng

ndpi: remove unused CVE-2021-36082.patch

2023-05-24 07:23:55 -07:00

ntp

ntp: add missing runtime dependencies

2023-09-07 08:22:43 -07:00

ntpsec

ntpsec, net-snmp: drop ${PE}, ${PR} from /usr/src/debug paths

2023-11-20 09:30:39 -08:00

nuttcp

recipes: Update LICENSE variable to use SPDX license identifiers

2022-03-04 17:41:45 -08:00

open-isns

open-isns: upgrade 0.101 -> 0.102

2022-09-13 09:55:02 -07:00

open-vm-tools

open-vm-tools: fix CVE-2025-22247

2025-08-02 13:37:04 -04:00

openipmi

openipmi: upgrade 2.0.34->2.0.36

2024-11-09 14:40:32 -05:00

openvpn

openvpn: upgrade 2.6.12 -> 2.6.14

2025-04-16 20:33:50 -04:00

pgpool2

pgpool2: Fix build with postgresql 16+

2024-03-05 11:02:05 -08:00

phytool

recipes: drop ${SRCPV} usage

2024-02-09 09:52:12 -08:00

pimd

pimd: switch SRC_URI to https

2024-04-14 08:38:39 -07:00

rdma-core

rdma-core: upgrade 50.0 -> 51.0

2024-04-21 10:52:48 -07:00

ruli

ruli: Pass cflags to makefile

2023-05-28 16:34:59 -07:00

smcroute

smcroute: upgrade 2.5.5 -> 2.5.6

2022-12-05 09:16:24 -08:00

sngrep

sngrep: upgrade 1.8.0 -> 1.8.1

2024-04-21 10:52:48 -07:00

spice

spice-gtk: add PACKAGECONFIG for webdav

2024-04-30 10:59:07 -07:00

ssmping

.patch: fix Upstream-Status formatting issues reported by patchreview tool from oe-core

2023-02-24 08:45:44 -08:00

ssmtp

ssmtp: Fix build with musl >= 1.2.5

2024-03-25 12:50:39 -07:00

strongswan

strongswan: upgrade 5.9.13 -> 5.9.14

2024-03-26 08:37:19 -07:00

stunnel

stunnel: upgrade 5.69 -> 5.72

2024-03-08 10:07:24 -08:00

tcpdump

tcpdump: fix CVE-2024-2397

2024-06-26 07:30:56 -04:00

tcpreplay

tcpreplay: fix CVE-2024-22654

2025-07-10 20:13:26 -04:00

tinyproxy

*.patch: add Upstream-Status to all patches

2023-06-21 09:15:20 -07:00

tnftp

tnftp: switch the SRC_URI to https

2024-04-14 08:38:39 -07:00

traceroute

traceroute: upgrade 2.1.3 -> 2.1.5

2024-01-08 19:54:45 -08:00

tunctl

recipes: Update LICENSE variable to use SPDX license identifiers

2022-03-04 17:41:45 -08:00

uftp

uftp: upgrade 5.0.2 -> 5.0.3

2023-12-29 09:04:16 -08:00

unbound

unbound: Fix CVE-2024-8508

2025-03-07 19:40:44 -05:00

vnstat

recipes: Update LICENSE variable to use SPDX license identifiers

2022-03-04 17:41:45 -08:00

wavemon

wavemon: add recipe for version 0.9.5

2024-02-21 19:59:52 -08:00

wireshark

wireshark: upgrade 4.2.9 -> 4.2.12

2025-07-10 20:05:56 -04:00

wpan-tools

recipes: Update SRC_URI branch and protocols

2021-11-03 06:57:49 -07:00