Score:0

Update open-vm-tools

cn flag

As per vulnerability CVE-2022-31676 I'm trying to update my Oracle Linux 8.6 systems open-vm-tools to 12.1.0. However, I'm finding that this package isn't still in the repository, so I have been trying to locate it in another RHEL-based repositories.

Finally, I found it in centOS 9 appstream mirror but when I proceed with the installation I receive the following error:

error: Failed dependencies:
        libc.so.6(GLIBC_2.33)(64bit) is needed by open-vm-tools-12.1.0-1.eln121.x86_64
        libc.so.6(GLIBC_2.34)(64bit) is needed by open-vm-tools-12.1.0-1.eln121.x86_64
        libcrypto.so.3()(64bit) is needed by open-vm-tools-12.1.0-1.eln121.x86_64
        libcrypto.so.3(OPENSSL_3.0.0)(64bit) is needed by open-vm-tools-12.1.0-1.eln121.x86_64
        libssl.so.3()(64bit) is needed by open-vm-tools-12.1.0-1.eln121.x86_64
        libssl.so.3(OPENSSL_3.0.0)(64bit) is needed by open-vm-tools-12.1.0-1.eln121.x86_64

Why this package isn't still in the OL86 repository? As it contains a vulnerability patch should be published as soon as possible.

Is there something I'm missing with this installation? Should I install using another method?

Score:2
in flag

You don't necessarily really need to update to 12.1.0.

According to the Oracle Errata the CVE-2022-31676 is fixed in the package version:

  • 11.3.5-1.el8_6.1

If you already are on that version you are safe.

I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.