open-vm-tools 12.3.0 was released on Aug. 31, 2023.



Also affects project (?) Also affects distribution/package
Edit
Bug Description

There are no new features in the open-vm-tools 12.3.0 release. This is
primarily a maintenance release that addresses a few critical problems,
including:

    This release resolves CVE-2023-20900. For more information on this
vulnerability and its impact on VMware products, see
https://www.vmware.com/security/advisories/VMSA-2023-0019.html.

    A tools.conf configuration setting is available to temporaily direct Linux
quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior of ignoring file
systems already frozen.

    Building of the VMware Guest Authentication Service (VGAuth) using
"xml-security-c" and "xerces-c" is being deprecated.

    A number of Coverity reported issues have been addressed.

    A number of GitHub issues and pull requests have been handled. Please see
the Resolves Issues section of the Release Notes.

    For issues resolved in this release, see the Resolved Issues section of the
Release Notes.

For complete details, see:
https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0

Release Notes are available at
https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md

The granular changes that have gone into the 12.3.0 release are in the
ChangeLog at
https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog

Note: With the changes upstreamed and the fix for CVE-2023-20867 in the source,
you may not need the following patches in your open-vm-toold pacjage build:

  0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  2023-20867-Remove-some-dead-code.patch
  detect-suse-location.patch

Please rebase open-vm-tools version 12.3.0 in supported releases of SLES 12 and
SLES 15 for x86_64/amd64 and aarch64/ARM64 architectures as appropriate.