-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 12 May 2025 15:17:50 +0200 Source: open-vm-tools Architecture: source Version: 2:12.5.0-2 Distribution: unstable Urgency: high Maintainer: Bernd Zeimetz <bzed@debian.org> Changed-By: Bernd Zeimetz <bzed@debian.org> Closes: 1105159 Changes: open-vm-tools (2:12.5.0-2) unstable; urgency=high . * [910f279] Fixing an insecure file handling vulnerability. It allowed a malicious actor with non-administrative privileges on a guest VM to tamper the local files to trigger insecure file operations within that VM. VMSA-2025-0007 CVE-2025-22247 (Closes: #1105159) Checksums-Sha1: 855595ac50b926d0002ccadc1b23a7b27342319b 2963 open-vm-tools_12.5.0-2.dsc 28dff27f0242b32c5a9e89584696e55aec01abc5 38112 open-vm-tools_12.5.0-2.debian.tar.xz ca99004e5c8cf37f4bf12c224e3b549decfeff94 6912 open-vm-tools_12.5.0-2_source.buildinfo Checksums-Sha256: 995eddf9419dafb5d64867ddb0541d3f908af5516811f4919394ce29c5cc0639 2963 open-vm-tools_12.5.0-2.dsc 4f7f3fd058b66dadc3ecb8f6eb8223e0f13ed7da95eb61741f501b0888fcc2a4 38112 open-vm-tools_12.5.0-2.debian.tar.xz ec604cb2a0340643f10cc6792390ce092f87f446e0a66052f259313ea9c25206 6912 open-vm-tools_12.5.0-2_source.buildinfo Files: 9e1f27e56f6f9e60e56991aa568a28ba 2963 admin optional open-vm-tools_12.5.0-2.dsc 1e5c66081a6813dd2d9125ce94ef820f 38112 admin optional open-vm-tools_12.5.0-2.debian.tar.xz c1a5c451a27074d8efb55da79a902e6f 6912 admin optional open-vm-tools_12.5.0-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7KHj8o4RJDLUhd2V6zYXGm/5Q18FAmgh+x0ACgkQ6zYXGm/5 Q1+74w//cdhmMmyNbnguMjtjiXJjfkkAMurFdHjuXmsbIlMJf5R38tYV7gX6kTcW MWV5oCwJaprx1MsoSxGHODHx6Gqkzm+Q8azXjm/e1R8sjXV11JdHaxYttrzPvWmj cwFjWkGAiC/DeZNcxF1oAMyCNkjj17fUpKEDGsmUqOk90KAWuuik7KNA6EizqaCy mYa4kekuvzuVItq+9t2omn2pIM/vSFczQMzx5gtPGlZznpPN6XIB9WMv9tPZTh7V yjluMvnCDHzSaBpL2Ui6dxa699MAzDRLCvYFo1ULFCp6YtsMsLnnBhKtIyfreGSD i3KpkdXctYxqnXVy6VokOjW61tnY3D3TH8aUyCx93YOXYsGDrsPF4b5uTuZqFqG7 3/1G54AjFIkNRta+QegepfRQW4H1XhbA5Dre9h1IT9no1/teegN0HtuTgJOlwqHS Sgna5NTY7NzMCLAI9nDPSuarYjTWX2C6RBNYKKnz1du6FjD5tlEQBIQRxAB+6Pkt pHb104fY7iYvyihYYH+kSDhZZD6mdEnkYLx2EprKq1PjoXD0vwjOm+8jzRrsg7C6 iorAS3pvFrifBnjEqa6ssbd62bFTfPkonNJtY6sygxflQlHiviIfoOCH3fpFFLIp NN66H3WvLnmqRnZrUxdfS4M8l4OBn1pDaEsP7CcfPugMscPtoz8= =wOld -----END PGP SIGNATURE-----