Bug#770809: open-vm-tools: CVE-2014-4199 CVE-2014-4200

2014-11-29 Thread Salvatore Bonaccorso
Hi Bernd, On Sat, Nov 29, 2014 at 03:23:54PM +0100, Bernd Zeimetz wrote: > CVE-2014-4200 fixed in Version: 2:9.4.6-1770165-1 FTR, it is marked as fixed already in the security-tracker at https://security-tracker.debian.org/tracker/CVE-2014-4200 . Thanks a lot for your work! Regards, Salvatore

Bug#770809: open-vm-tools: CVE-2014-4199 CVE-2014-4200

2014-11-29 Thread Bernd Zeimetz
CVE-2014-4200 fixed in Version: 2:9.4.6-1770165-1 root@zebedev001:/tmp# /etc/vmware-tools/vm-support VMware UNIX Support Script 0.89 [...] Creating tar archive... Uploading archive to host... Done, support data available in 'vm-2014-11-29.29391.tar.gz'. root@zebedev001:/tmp# ls -la 'vm-2014-11-2

Bug#770809: open-vm-tools: CVE-2014-4199 CVE-2014-4200

2014-11-24 Thread Moritz Muehlenhoff
Package: open-vm-tools Severity: important Tags: security Hi, please see http://seclists.org/fulldisclosure/2014/Aug/71 for the original report. The affected script is shipped in open-vm-tools as /etc/vmware-tools/vm-support Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bugs-dis