open security update

CentOS Errata and Security Advisory CESA-2023:3944

The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization components that enhance performance and user experience of virtual machines.

Security Fix(es):

• open-vm-tools: authentication bypass vulnerability in the vgauth module (CVE-2023-20867)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

• [ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file ‘quiesce_manifest.xml’ (BZ#1880404)

• [ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs (BZ#1994590)

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2023-July/086397.html

Affected packages:
open-vm-tools
open-vm-tools-desktop
open-vm-tools-devel
open-vm-tools-test

Upstream details at:
https://access.redhat.com/errata/RHSA-2023:3944