.gitignore

@@ -1 +1 @@
-SOURCES/open-vm-tools-12.5.0-24276846.tar.gz
+SOURCES/open-vm-tools-12.3.5-22544099.tar.gz

.open-vm-tools.metadata

@@ -1 +1 @@
-3bcbcf751b273cb9b3984484ad70b14a2efddb6f SOURCES/open-vm-tools-12.5.0-24276846.tar.gz
+84ec127c620c46f6cddb5e38ce556a31244a967d SOURCES/open-vm-tools-12.3.5-22544099.tar.gz

SOURCES/ovt-SDMP-Service-Discovery-Plugin.patch

@@ -0,0 +1,133 @@
+From 68384f6ab79233817b5bf3370f0a46ee20a7f7e8 Mon Sep 17 00:00:00 2001
+From: Vitaly Kuznetsov <vkuznets@redhat.com>
+Date: Wed, 1 Oct 2025 10:49:34 +0200
+Subject: [PATCH] SDMP: Service Discovery Plugin
+
+RH-Author: Vitaly Kuznetsov <vkuznets@redhat.com>
+RH-MergeRequest: 56: SDMP: Service Discovery Plugin
+RH-Jira: RHEL-117388
+RH-Acked-by: roverflow <None>
+RH-Acked-by: Maxim Levitsky <None>
+RH-Acked-by: Ani Sinha <anisinha@redhat.com>
+RH-Commit: [1/1] b8e63c398b7615bbbd86ae3b4539717e4fff74b1
+
+JIRA: https://issues.redhat.com/browse/RHEL-117388
+CVE: CVE-2025-41244
+
+commit 7ed196cf01f8acd09011815a605b6733894b8aab
+Author: Kruti Pendharkar <kp025370@broadcom.com>
+Date:   Mon Sep 29 01:02:40 2025 -0700
+
+    Address CVE-2025-41244
+     - Disable (default) the execution of the SDMP get-versions.sh script.
+
+    With the Linux SDMP get-versions.sh script disabled, version information
+    of installed services will not be made available to VMware Aria
+
+RHEL-only: used
+https://github.com/vmware/open-vm-tools/blob/CVE-2025-41244.patch/CVE-2025-41244-1230-1235-SDMP.patch
+patch for 12.3 version.
+
+Signed-off-by: Vitaly Kuznetsov <vkuznets@redhat.com>
+---
+ .../serviceDiscovery/serviceDiscovery.c       | 34 ++++++++++++++++---
+ 1 file changed, 30 insertions(+), 4 deletions(-)
+
+diff --git a/open-vm-tools/services/plugins/serviceDiscovery/serviceDiscovery.c b/open-vm-tools/services/plugins/serviceDiscovery/serviceDiscovery.c
+index 103cf14e..2f65294b 100644
+--- a/open-vm-tools/services/plugins/serviceDiscovery/serviceDiscovery.c
++++ b/open-vm-tools/services/plugins/serviceDiscovery/serviceDiscovery.c
+@@ -115,6 +115,12 @@ static gchar* scriptInstallDir = NULL;
+  */
+ #define SERVICE_DISCOVERY_RPC_WAIT_TIME 100
+ 
++/*
++ * Defines the configuration to enable/disable version obtaining logic
++ */
++#define CONFNAME_SERVICEDISCOVERY_VERSION_CHECK "version-check-enabled"
++#define SERVICE_DISCOVERY_CONF_DEFAULT_VERSION_CHECK FALSE
++
+ /*
+  * Defines the configuration to cache data in gdp plugin
+  */
+@@ -1239,23 +1245,27 @@ ServiceDiscoveryServerShutdown(gpointer src,
+  *
+  * Construct final paths of the scripts that will be used for execution.
+  *
++ * @param[in] versionCheckEnabled  TRUE to include the SERVICE_DISCOVERY_KEY_VERSIONS
++ *                                 entry; FALSE to skip it (derived from config).
++ *
+  *****************************************************************************
+  */
+ 
+ static void
+-ConstructScriptPaths(void)
++ConstructScriptPaths(Bool versionCheckEnabled)
+ {
+    int i;
+ #if !defined(OPEN_VM_TOOLS)
+    gchar *toolsInstallDir;
+ #endif
++   int insertIndex = 0;
+ 
+    if (gFullPaths != NULL) {
+       return;
+    }
+ 
+    gFullPaths = g_array_sized_new(FALSE, TRUE, sizeof(KeyNameValue),
+-                                  ARRAYSIZE(gKeyScripts));
++                                  ARRAYSIZE(gKeyScripts) - (versionCheckEnabled ? 0u : 1u));
+    if (scriptInstallDir == NULL) {
+ #if defined(OPEN_VM_TOOLS)
+       scriptInstallDir = Util_SafeStrdup(VMTOOLS_SERVICE_DISCOVERY_SCRIPTS);
+@@ -1267,6 +1277,15 @@ ConstructScriptPaths(void)
+ #endif
+    }
+    for (i = 0; i < ARRAYSIZE(gKeyScripts); ++i) {
++      /*
++       * Skip adding if:
++       * 1. Version check is disabled, AND
++       * 2. The keyName matches SERVICE_DISCOVERY_KEY_VERSIONS
++       */
++      if (!versionCheckEnabled &&
++         g_strcmp0(gKeyScripts[i].keyName, SERVICE_DISCOVERY_KEY_VERSIONS) == 0) {
++         continue;
++      }
+       KeyNameValue tmp;
+       tmp.keyName = g_strdup_printf("%s", gKeyScripts[i].keyName);
+ #if defined(_WIN32)
+@@ -1274,7 +1293,8 @@ ConstructScriptPaths(void)
+ #else
+       tmp.val = g_strdup_printf("%s%s%s", scriptInstallDir, DIRSEPS, gKeyScripts[i].val);
+ #endif
+-      g_array_insert_val(gFullPaths, i, tmp);
++      g_array_insert_val(gFullPaths, insertIndex, tmp);
++      insertIndex++;
+    }
+ }
+ 
+@@ -1340,14 +1360,20 @@ ToolsOnLoad(ToolsAppCtx *ctx)
+          }
+       };
+       gboolean disabled;
++      Bool versionCheckEnabled;
+ 
+       regData.regs = VMTools_WrapArray(regs,
+                                        sizeof *regs,
+                                        ARRAYSIZE(regs));
++      versionCheckEnabled = VMTools_ConfigGetBoolean(
++         ctx->config,
++         CONFGROUPNAME_SERVICEDISCOVERY,
++         CONFNAME_SERVICEDISCOVERY_VERSION_CHECK,
++         SERVICE_DISCOVERY_CONF_DEFAULT_VERSION_CHECK);
+       /*
+        * Append scripts execution command line
+        */
+-      ConstructScriptPaths();
++      ConstructScriptPaths(versionCheckEnabled);
+ 
+       disabled =
+          VMTools_ConfigGetBoolean(ctx->config,
+-- 
+2.47.3
+

SOURCES/vmtoolsd.service

@@ -4,6 +4,8 @@ Documentation=https://github.com/vmware/open-vm-tools
 ConditionVirtualization=vmware
 Requires=vgauthd.service
 After=vgauthd.service
+DefaultDependencies=no
+Before=cloud-init-local.service
 StartLimitIntervalSec=30
 StartLimitBurst=3
 

SPECS/open-vm-tools.spec

@@ -18,9 +18,10 @@
 ### Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
 ################################################################################
 
-%global majorversion    12.5
-%global minorversion    0
-%global toolsbuild      24276846
+%global _hardened_build 1
+%global majorversion    12.3
+%global minorversion    5
+%global toolsbuild      22544099
 %global toolsversion    %{majorversion}.%{minorversion}
 %global toolsdaemon     vmtoolsd
 %global vgauthdaemon    vgauthd
@@ -31,7 +32,7 @@
 
 Name:             open-vm-tools
 Version:          %{toolsversion}
-Release:          1%{?dist}
+Release:          2%{?dist}.1
 Summary:          Open Virtual Machine Tools for virtual machines hosted on VMware
 License:          GPLv2
 URL:              https://github.com/vmware/%{name}
@@ -43,14 +44,16 @@ Source3:          run-vmblock\x2dfuse.mount
 Source4:          open-vm-tools.conf
 Source5:          vmtoolsd.pam
 
+
 %if 0%{?rhel} >= 7
-ExclusiveArch:    x86_64 aarch64
+ExclusiveArch:    x86_64
 %else
 ExclusiveArch:    %{ix86} x86_64 aarch64
 %endif
 
-# Patches
-#Patch0:           <patch-name0>.patch
+# Patch0: name.patch
+# For RHEL-117388 - [CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-8.10.z]
+Patch1: ovt-SDMP-Service-Discovery-Plugin.patch
 
 BuildRequires:    autoconf
 BuildRequires:    automake
@@ -59,12 +62,7 @@ BuildRequires:    make
 BuildRequires:    gcc-c++
 BuildRequires:    doxygen
 # Fuse is optional and enables vmblock-fuse
-# Switching Fedora to use fuse3.   Red Hat to switch on their own schedule.
-%if 0%{?fedora} || 0%{?rhel} > 8
-BuildRequires:    fuse3-devel
-%else
 BuildRequires:    fuse-devel
-%endif
 BuildRequires:    glib2-devel >= 2.14.0
 BuildRequires:    libicu-devel
 BuildRequires:    libmspack-devel
@@ -99,11 +97,7 @@ BuildRequires:    systemd
 %endif
 
 Requires:         coreutils
-%if 0%{?fedora} || 0%{?rhel} > 8
-Requires:         fuse3
-%else
 Requires:         fuse
-%endif
 Requires:         iproute
 Requires:         grep
 Requires:         pciutils
@@ -114,8 +108,6 @@ Requires:         util-linux
 Requires:         which
 # xmlsec1-openssl needs to be added explicitly
 Requires:         xmlsec1-openssl
-# DeployPkg pluggin require dbus-uuidgen
-Requires:         dbus-tools
 
 # open-vm-tools >= 10.0.0 do not require open-vm-tools-deploypkg provided by
 # VMware. That functionality is now available as part of open-vm-tools package
@@ -420,272 +412,199 @@ fi
 %{_bindir}/vmware-vgauth-smoketest
 
 %changelog
-* Tue Dec 03 2024 Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
-- Rebase to 12.5.0 [RHEL-63096]
-- Resolves: RHEL-63096
-  ([ESXi][RHEL9] open-vm-tools version 12.5.0 has been released - please rebase)
+* Tue Oct 07 2025 Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2.el8.1
+- ovt-SDMP-Service-Discovery-Plugin.patch [RHEL-117388]
+- Resolves: RHEL-117388
+  ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-8.10.z])
 
-* Thu Sep 12 2024 Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
-- Rebase to 12.4.5 [RHEL-45547]
-- Resolves: RHEL-45547
-  ([ESXi][RHEL9] open-vm-tools version 12.4.5 has been released - please rebase)
-
-* Mon May 20 2024 Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
-- ovt-Require-dbus-tools.patch [RHEL-35543]
-- Resolves: RHEL-35543
-  ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools)
-
-* Thu Apr 18 2024 Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
-- Rebase to 12.4.0 [RHEL-30341
-- Resolves: RHEL-30341
-  ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase)
-
-* Mon Dec 04 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
-- ovt-Restart-tools-on-failure.patch [RHEL-15346]
-- Resolves: RHEL-15346
-  (Add Restart=on-failure to vmtoolsd.service)
+* Wed Dec 06 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
+- ovt-Restart-tools-on-failure.patch [RHEL-17683]
+- Resolves: RHEL-17683
+  (Add Restart=on-failure to vmtoolsd.service [rhel-8])
 
 * Thu Nov 09 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
-- Rebase to 12.3.5-1 [RHEL-15058]
-- Fixed CVE-2023-34058 [RHEL-14653]
-- Fixed CVE-2023-34059 [RHEL-14687]
-- Resolves: RHEL-15058
-  ([ESXi][RHEL9]open-vm-tools version 12.3.5 has been released - please rebase)
-- Resolves: RHEL-14653
-  (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-9.4.0])
-- Resolves: RHEL-14687
-  (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-9.4.0])
+- Rebase to 12.3.5 [RHEL-15059]
+- Fix CVE-2023-34058 [RHEL-14649]
+- Fix CVE-2023-34059 [RHEL-14683]
+- Resolves: RHEL-15059
+  ([ESXi][RHEL8]open-vm-tools version 12.3.5 has been released - please rebase)
+- Resolves: RHEL-14649
+  (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-8.10.0])
+- Resolves: RHEL-14683
+  (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-8.10.0])
 
-* Fri Sep 22 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
-- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-2446]
-- Resolves: RHEL-2446
-  ([RHEL9.3][ESXi]Latest version of open-vm-tools breaks VM backups)
+* Wed Sep 27 2023 Jon Maloy <jmaloy@redhat.com> - 12.2.5-4
+- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-7012]
+- Resolves: RHEL-7012
+  ([RHEL8.10][ESXi]Latest version of open-vm-tools breaks VM backups)
 
-* Fri Sep 08 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2
-- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [bz#2236544]
-- Resolves: bz#2236544
-  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-9])
+* Wed Sep 20 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
+- Rebuild CVE-2023-20900 for 8.10
+- Resolves: RHEL-4584
+  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-8.10.0])
 
-* Mon Jul 10 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
-- Rebaer to open-vm-tools 12.2.5
-- Resolves: bz#2214862
-  ([ESXi][RHEL9]open-vm-tools version 12.2.5 has been released - please rebase)
+* Tue Jul 11 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
+- Rebase to open-vm-tools 12.2.5 [bz#2214861]
+- Resolves: bz#2214861
+  ([ESXi][RHEL8]open-vm-tools version 12.2.5 has been released - please rebase)
+- Resolves: bz#2216415
+  ([ESXi][RHEL8] URL in service unit files are started from http instead of https)
 
-* Tue Jun 27 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-3
-- ovt-Remove-some-dead-code.patch [bz#2215566]
-- Resolves: bz#2215566
-  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-br-9])
-
-* Tue Jun 20 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-2
-- ovt-Use-https-instead-of-http-for-documentation-links.patch [bz#2208160]
-- Resolves: bz#2208160
-  ([ESXi][RHEL9] URL in service unit files are started from http instead of https)
+* Wed Jun 28 2023 Jon Maloy <jmaloy@redhat.com> - 12.2.0-3
+- ovt-Remove-some-dead-code.patch [bz#2215563]
+- Resolves: bz#2215563
+  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-8])
 
 * Wed May 03 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1
-- Rebase to open-vm-tools 12.2.0 [bz#2177086]
-- Resolves: bz#2177086
-  ([ESXi][RHEL9]open-vm-tools version 12.2.0 has been released - please rebase)
+- Rebase to open-vm-tools 12.2.0 [bz#2177068]
+- Resolves: bz#2177068
+  ([ESXi][RHEL8]open-vm-tools version 12.2.0 has been released - please rebase)
 
-* Fri Dec 09 2022 Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-1
-- Rebase to open-vm-tools 12.1.5 [bz#2150190]
-- Resolves: bz#2150190
-  ([ESXi][RHEL9]Open-vm-tools release 12.1.5 has been released - please rebase)
+* Fri Dec 09 2022 Miroslav Rezanina <mrezanin@redhat.com> 12.1.5-1
+- Rebase to open-vm-tools 12.1.5 [bz#2150188]
+- Resolves: bz#2150188
+  (ESXi][RHEL8]Open-vm-tools release 12.1.5 has been released - please rebase)
 
-* Fri Sep 09 2022 Miroslav Rezanina <mrezanin@redhat.com> - 12.1.0-1
-- Rebase to open-mv-tools 12.1.0 [bz#2121203]
-- Resolves: bz#2121203
-  ([ESXi][RHEL9]Open-vm-tools release 12.1.0 has been released - please rebase)
+* Tue Sep 13 2022 Miroslav Rezanina <mrezanin@redhat.com> 12.1.0-1
+- Rebase to open-vm-tools 12.1.0
+- Resolves: bz#2121196
+  ([ESXi][RHEL8]Open-vm-tools release 12.1.0 has been released - please rebase)
+
+* Tue Sep 06 2022 Jon Maloy <jmaloy@redhat.com> - 12.0.5-2
+- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119284]
+- Resolves: bz#2119284
+  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-8.7.0])
 
 * Tue Jun 07 2022 Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-1
-- Rebase to open-vm-tools 12.0.5 [bz#2090275]
-- Resolves: bz#2090275
-  ([ESXi][RHEL9]Open-vm-tools release 12.0.5 has been released - please rebase)
+- Rebase to open-vm-tools 12.0.5 [bz#2090273]
+- Resolves: bz#2090273
+  ([ESXi][RHEL8]Open-vm-tools release 12.0.5 has been released - please rebase)
 
 * Thu Apr 28 2022 Miroslav Rezanina <mrezanin@redhat.com> - 12.0.0-1
-- Rebase to 12.0.0 [bz#2061193]
-- Resolves: bz#2061193
-  ([ESXi][RHEL9]Open-vm-tools release 12.0.0 has been released - please rebase)
+- Rebase to open-vm-tools 12.0.0 [bz#2061189]
+- Resolves: bz#2061189
+  ([ESXi][RHEL8]Open-vm-tools release 12.0.0 has been released - please rebase)
 
-* Fri Oct 15 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.3.5-1
-- Rebase to 11.3.5 [bz#2008243]
-- Resolves: bz#2008243
-  ([ESXi][RHEL9]Open-vm-tools release 11.3.5 has been released - please rebase)
+* Mon Oct 18 2021 Miroslav Rezanian <mrezanin@redhat.com> - 11.3.5-1
+- Rebase to open-vm-tools 11.3.5 [bz#2008244]
+- Resolves: bz#2008244
+  ([ESXi][RHEL8]Open-vm-tools release 11.3.5 has been released - please rebase)
 
-* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 11.3.0-2
-- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
-  Related: rhbz#1991688
+* Thu Sep 23 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.3.0-1.el8
+- Rebase to open-vm-tools 11.3.0 [bz#1974468]
+- Resolves: bz#1974468
+  ([ESXi][RHEL8]Open-vm-tools release 11.3.0 has been released - please rebase)
 
-* Wed Jul 21 2021 Miroslav Rezanina <rezanin@redhat.com> - 11.3.0-1
-- Rebase to 11.3.0 [bz#1974471]
-- Resolves: bz#1974471
-  ([ESXi][RHEL9]Open-vm-tools release 11.3.0 has been released - please update for RHEL 9.0)
+* Thu Apr 29 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-2.el8
+- ovt-Fix-a-memory-leak-reported-by-a-partner-from-their-C.patch [bz#1935807]
+- Resolves: bz#1935807
+  ([ESXi][RHEL-8.5][open-vm-tools] Coverity detected an important defect in open-vm-tools-11.2.5 rebase)
 
-* Wed Jun 16 2021 Mohan Boddu <mboddu@redhat.com> - 11.2.5-5
-- Rebuilt for RHEL 9 BETA for openssl 3.0
-  Related: rhbz#1971065
+* Tue Mar 02 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-1.el8
+- Rebase to 11.2.5 [bz#1916561]
+  ([ESXi][RHEL8.5]Open-vm-tools update release 11.2.5 has been released)
 
-* Tue May 11 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-4
-- ovt-Fix-a-memory-leak-reported-by-a-partner-from-their-C.patch [bz#1954040]
-- Resolves: bz#1954040
-  ([ESXi][RHEL9.0][open-vm-tools] Coverity detected an important defect in open-vm-tools-11.2.5 rebase)
+* Tue Dec 01 2020 Miroslav Rezanina <mrezanin@redhat.com> - 11.2.0-2.el8
+- ovt-Fix-memory-leaks.patch [bz#1896804]
+- Resolves: bz#1896804
+  ([ESXi][open-vm-tools] Coverity detected important defects in open-vm-tools-11.2.0 rebase)
 
-* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 11.2.5-3
-- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
+* Tue Nov 10 2020 Miroslav Rezanina <mrezanin@redaht.com> - 11.2.0-1.el8
+- Rebase to 11.2.0 [bz#1890831]
+- Resolves: bz#1890831
+  ([ESXi][RHEL8]Rebase open-vm-tools to 11.2.0 for 8.4)
 
-* Fri Apr 09 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-2.el9
-- ovt-Fixes-necessary-to-build-open-vm-tools-with-newer-gt.patch [bz#1936382]
-- ovt-Update-spec-file-for-correct-build.patch [bz#1936382]
-- Resolves: bz#1936382
-  ([ESXi][RHEL-9][FTBS] open-vm-tools not working with newer gtk libraries)
+* Wed Sep 30 2020 Miroslav Rezanina <mrezanin@redaht.com> - 11.1.5-1.el8
+- Rebase to 11.1.5 [bz#1870781]
+- Resolves: bz#1870781
+  ([ESXi][RHEL8]Rebase open-vm-tools to 11.1.5 for 8.4)
 
-* Fri Jan 15 2021 Ravindra Kumar <ravindrakumar@vmware.com> - 11.2.5-1
-- Package new upstream version open-vm-tools-11.2.5-17337674.
-- libdnet dependency was removed in open-vm-tools 11.0.0. So,
-  removed the stale BuildRequires for libdnet.
+* Thu Jul 02 2020 Miroslav Rezanina <mrezanin@redaht.com> - 11.1.0-2.el8
+- Remove net-tools dependency [bz#1849459]
+- Resolves: bz#1849459
+  ([ESXi][RHEL8]Incorporate SDMP related fixes and removal of net-tools dependency)
 
-* Thu Jan 14 2021 Richard W.M. Jones <rjones@redhat.com> - 11.2.0-2
-- Bump and rebuild against libdnet 1.14 (RHBZ#1915838).
+* Tue May 26 2020 Mirosalv Rezanina <mrezanin@redhat.com> - 11.1.0-1.el8
+- Rebase to 11.1.0 [bz#1806677]
+- Added open-vm-tools-sdmp package [bz#1833157)
+- Resolves: bz#1806677
+  ([ESXi][RHEL8]Rebase open-vm-tools to 11.1.0 for RHEL 8.3)
+- Resolves: bz#1833157
+  ([ESXi][RHEL8]Add new open-vm-tools-sdmp package for RHEL 8.3)
 
-* Fri Nov 06 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.2.0-1
-- Package new upstream version open-vm-tools-11.2.0-16938113.
+* Tue Apr 21 2020 Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-3.el8
+- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1811729]
+- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1811729]
+- ovt-add-appinfo-plugin.patch [bz#1809751]
+- Resolves: bz#1809751
+  ([ESXi][RHEL8.2.1]open-vm-tools add appinfo plugin patch)
+- Resolves: bz#1811729
+  ([ESXi][RHEL8.2.1]open-vm-tools coverity scan issue)
 
-* Fri Oct 30 2020 Jeff Law <law@redhat.com> - 11.1.5-2
-- Fix incorrect volatile exposed by gcc-11
+* Wed Apr 08 2020 Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-1.el8
+- Rebase to 11.0.5 (bz#1798285)
+- Resolves: bz#1798285
+  ([ESXi][RHEL8.2.1]Rebase open-vm-tools to 11.0.5 for 8.2.1)
 
-* Tue Sep 08 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.1.5-1
-- Package new upstream version open-vm-tools-11.1.5-16724464.
-- Removed gcc10-warning.patch and sdmp-fixes.patch (no longer needed).
+* Tue Feb 18 2020 Miroslav Rezanina <mrezanin@redhat.com> - 11.0.0-4.el8
+- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1800812]
+- Resolves: bz#1800812
+  ([ESXi][RHEL8]Log spew "[ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name)
 
-* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 11.1.0-4
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
+* Thu Dec 05 2019 Miroslav Rezanina <mrezanin@redhat.com> - 11.0.0-3.el8
+- ovt-Address-Coverity-issues-reported-in-bora-lib-file-fi.patch [bz#1769881]
+- ovt-Fix-a-potential-NULL-pointer-dereference-in-the-vmba.patch [bz#1769881]
+- ovt-Address-two-Coverity-reported-issues-in-hostinfoPosi.patch [bz#1769881]
+- ovt-Fix-a-resource-leak-issue-in-deployPkg.patch [bz#1769881]
+- Resolves: bz#1769881
+  ([ESXi][RHEL8.2]Important issues found by covscan in "open-vm-tools-11.0.0-2.el8" package)
 
-* Thu Jul 09 2020 Merlin Mathesius <mmathesi@redhat.com> - 11.1.0-3
-- Conditional fixes to build for ELN
+* Mon Oct 14 2019 Miroslav Rezanina <mrezanin@redhat.com> - 11.0.0-1.el8
+- Rebase to 11.0.0 [bz#1754658]
+- Resolves: bz#1754658
+  (Rebase open-vm-tools to 11.0 for 8.2.0)
+- Resolves: bz#1760891
+  (Need to backport some severe memory leak fixes from upstream)
 
-* Sun Jun 21 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.1.0-2
-- Added sdmp-fixes.patch from upstream to remove net-tools dependency
-  and couple of important fixes
+* Thu Aug 01 2019 Miroslav Rezanina <mrezanin@redhat.com> - 10.3.10-3.el8
+- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1602648]
+- ovt-Fix-memory-leak-in-GetFormattedCommandLine-function-.patch [bz#1602648]
+- ovt-Fix-a-leak-if-VGAuth-setup-fails.-Coverity-issue.patch [bz#1602648]
+- ovt-Fix-minor-leak-in-FileRotateByRenumber-Coverity-scan.patch [bz#1602648]
+- ovt-Fix-memory-leak-in-SNEBuildHash-function.patch [bz#1602648]
+- ovt-Fix-Coverity-reported-issues-in-i18n.c-code-VMTools-.patch [bz#1602648]
+- ovt-Fix-a-memory-leak-in-the-unicode-library.patch [bz#1602648]
+- ovt-Fix-a-trivial-Coverity-reported-memory-leak-in-vgaut.patch [bz#1602648]
+- ovt-Fixes-for-few-leaks-and-improved-error-handling.patch [bz#1602648]
+- ovt-Fix-Coverity-reported-double-memory-free-errors.patch [bz#1602648]
+- ovt-Fix-a-trivial-Coverity-reported-memory-leak.patch [bz#1602648]
+- ovt-Fix-RH-Covscan-Coverity-reported-memory-leaks-in-too.patch [bz#1602648]
+- ovt-Fix-Using-uninitialized-value-issue-reported-by-Cove.patch [bz#1602648]
+- ovt-copyPasteCompatX11.c-code-generating-unnecessary-Cov.patch [bz#1602648]
+- ovt-Fix-a-Coverity-issue-reported-in-vgauth-serviceImpl-.patch [bz#1602648]
+- ovt-Fix-two-coverity-issues-reported-by-a-customer.patch [bz#1602648]
+- Resolves: bz#1602648
+  ([ESXi][RHEL8]Please review important issues found by covscan in "open-vm-tools-10.2.5-2.el8+7" package)
 
-* Mon May 25 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.1.0-1
-- Package new upstream version open-vm-tools-11.1.0-16036546.
-- Added new open-vm-tools-sdmp package.
-- Workaround for vm-support script path is no longer needed.
-- Added missing dependencies for vm-support script.
-- Updated gcc10-warning.patch.
-- Removed gcc9-static-inline.patch and diskinfo-log-spew.patch that
-  are no longer needed.
+* Tue Jun 04 2019 Miroslav Rezanina <mrezanin@redhat.com> - 10.3.10-2
+- Rebase to 10.3.10 [bz#1702784]
+- Resolves: bz#1702784
+  (Rebase open-vm-tools to 10.3.10)
 
-* Sun May 17 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.5-4
-- Updated PAM configuration file to follow configured authn scheme.
+* Tue Jan 08 2019 Miroslav Rezanina <mrezanin@redhat.com> - 10.3.0-2.el8
+- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1660713]
+- Resolves: bz#1660713
+  ([ESXi][RHEL8.0]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
 
-* Tue Mar 24 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.5-3
-- Use /sbin/ldconfig on older than Fedora 28 and RHEL 8 platforms.
+* Tue Oct 16 2018 Miroslav Rezanina <mrezanin@redhat.com> - 10.3.0-1
+- Rebase to 10.3.0 [bz#1626578]
+- Resolves: bz#1626578
+  ([ESXi][RHEL8]Rebase open-vm-tools to 10.3.0)
 
-* Fri Feb 07 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.5-2
-- Added patch diskinfo-log-spew.patch.
-
-* Tue Feb 04 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.5-1
-- Package new upstream version open-vm-tools-11.0.5-15389592.
-- Removed vix-memleak.patch which is no longer needed.
-
-* Tue Feb 04 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.0-6
-- Added gcc10-warning.patch for fixing compilation issues.
-
-* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 11.0.0-5
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
-
-* Wed Oct 09 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.0-4
-- Fixes for drag-n-drop that needs vmblock-fuse mount.
-- Added run-vmblock\x2dfuse.mount service unit for vmblock-fuse mount.
-- Added open-vm-tools.conf for loading Fuse.
-
-* Wed Oct 09 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.0-3
-- Cleanup GuestProxy certs from /etc/vmware-tools/GuestProxyData if needed.
-- Cleanup vmtoolsd-init service symlinks.
-
-* Wed Oct 02 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.0-2
-- vmtoolsd-init.service is no longer needed for 11.0.0, removed it.
-
-* Wed Oct 02 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.0-1
-- Package new upstream version open-vm-tools-11.0.0-14549434.
-- Added gcc9-static-inline.patch for gcc9 warnings.
-- Added vix-memleak.patch for a memory leak.
-- Removed gcc9-warnings.patch which is no longer needed.
-- Removed vmware-guestproxycerttool as it is no longer available upstream.
-
-* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 10.3.10-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
-
-* Sat Mar 16 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.10-1
-- Package new upstream version open-vm-tools-10.3.10-12406962.
-- Removed quiescing-combined.patch which is no longer needed.
-
-* Wed Feb 13 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.5-2
-- Combine all gcc9 warning patches into one single gcc9-warnings.patch.
-
-* Tue Feb 12 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.5-1
-- Package new upstream version open-vm-tools-10.3.5-10430147.
-- Removed cloud-init.patch which is no longer needed.
-- Removed hgfsPlugin-crash.patch which is no longer needed.
-- Removed linuxDeploymentUtils-strncat.patch which is no longer needed.
-- Added quiescing-combined.patch for quiesced snapshot fixes.
-- Updated hgfsServer-aligned.patch for open-vm-tools-10.3.5.
-
-* Tue Feb 12 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-8
-- Updated *-aligned.patch files with more tweaks.
-- Filed a regression in readdir operation in dir-aligned.patch.
-
-* Sun Feb 03 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-7
-- Added hgfsServer-aligned.patch for "address-of-packed-member" error.
-- Added hgfsmounter-aligned.patch for "address-of-packed-member" error.
-- Added util-misc-format.patch for "format-overflow" error.
-- Added linuxDeploymentUtils-strncat.patch for "stringop-truncation" error.
-- Added filesystem-aligned.patch for "address-of-packed-member" error.
-- Added file-aligned.patch for "address-of-packed-member" error.
-- Added fsutil-aligned.patch for "address-of-packed-member" error.
-- Added dir-aligned.patch for "address-of-packed-member" error.
-- Added link-aligned.patch for "address-of-packed-member" error.
-
-* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 10.3.0-6
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
-
-* Mon Oct 01 2018 Simone Caronni <negativo17@gmail.com> - 10.3.0-5
-- Update SPEC file to match packaging guidelines.
-- Re-add ldconfig scriptlets. They expand to nothing in Fedora 28+, but they
-  are still required for Fedora 27. These can be removed when Fedora 27 is EOL.
-
-* Fri Aug 10 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-4
-- Fixed few bugs related to vmtoolsd-init.service.
-
-* Tue Aug 07 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-3
-- Implement the https://pagure.io/packaging-committee/issue/506 guideline.
-- Added vmtoolsd-init.service per the guideline.
-- Replaced the certificate cleanup with "vmware-guestproxycerttool -e".
-
-* Mon Aug 06 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-2
-- Added hgfsPlugin-crash.patch for vmtoolsd crash (RHBZ#1612470).
-
-* Thu Aug 02 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-1
-- Package new upstream version open-vm-tools-10.3.0-8931395.
-- Updated cloud-init.patch for 10.3.0.
-- Removed use-tirpc.patch which is no longer needed.
-
-* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 10.2.5-7
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
-
-* Wed Jul 11 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.2.5-6
-- Added cloud-init.patch to detect cloud-init correctly.
-- Added cleanup for /etc/vmware-tools directory on uninstall.
-
-* Tue Jul 10 2018 Pete Walter <pwalter@fedoraproject.org> - 10.2.5-5
-- Rebuild for ICU 62
-
-* Thu Jul 05 2018 Richard W.M. Jones <rjones@redhat.com> - 10.2.5-4
-- Remove ldconfig
-  https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/SU3LJVDZ7LUSJGZR5MS72BMRAFP3PQQL/
-
-* Tue May 15 2018 Pete Walter <pwalter@fedoraproject.org> - 10.2.5-3
-- Rebuild for ICU 61.1
+* Mon May 14 2018 Miroslav Rezanina <mrezanin@redhat.com> - 10.2.5-2
+- Updated RHEL version
+- Resolves: bz#1527233
+  ([ESXi][RHEL7.5]Rebase open-vm-tools to 10.2.5)
 
 * Wed May 09 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.2.5-2
 - Use tirpc for Fedora 28 onwards.