diff --git a/package/openvmtools/0013-Properly-check-authorization-on-incoming-guestOps-re.patch b/package/openvmtools/0013-Properly-check-authorization-on-incoming-guestOps-re.patch index 91e379b9a6..c257e77504 100644 --- a/package/openvmtools/0013-Properly-check-authorization-on-incoming-guestOps-re.patch +++ b/package/openvmtools/0013-Properly-check-authorization-on-incoming-guestOps-re.patch @@ -7,6 +7,7 @@ Subject: [PATCH] Properly check authorization on incoming guestOps requests Fix public pipe request checks. Only a SessionRequest type should be accepted on the public pipe. +CVE: CVE-2022-31676 Upstream: https://github.com/vmware/open-vm-tools/blob/CVE-2022-31676.patch/1205-Properly-check-authorization-on-incoming-guestOps-re.patch Signed-off-by: Stefan Agner --- diff --git a/package/openvmtools/0014-CVE-2025-22247-1100-1225-VGAuth-updates.patch b/package/openvmtools/0014-CVE-2025-22247-1100-1225-VGAuth-updates.patch index f47fabb71b..48962857ba 100644 --- a/package/openvmtools/0014-CVE-2025-22247-1100-1225-VGAuth-updates.patch +++ b/package/openvmtools/0014-CVE-2025-22247-1100-1225-VGAuth-updates.patch @@ -19,6 +19,7 @@ The 2025 Broadcom copyright information update is not part of this patch set to allow the patch to be easily applied to previous open-vm-tools source releases. +CVE: CVE-2025-22247 Upstream: https://github.com/vmware/blob/CVE-2025-22247.patch/CVE-2025-22247-1100-1225-VGAuth-updates.patch Signed-off-by: Peter Korsgaard ---