6 changed files with 179 additions and 359 deletions
--- a/.gitignore
+++ b/.gitignore
@ -1 +1 @@
-SOURCES/open-vm-tools-12.1.5-20735119.tar.gz
+SOURCES/open-vm-tools-12.3.5-22544099.tar.gz
--- a/.open-vm-tools.metadata
+++ b/.open-vm-tools.metadata
@ -1 +0,0 @@
-92cfc4bc23f3f4392a0e925d639aeac37c4aafb5 SOURCES/open-vm-tools-12.1.5-20735119.tar.gz
--- a/SOURCES/ovt-Remove-some-dead-code.patch
+++ b/SOURCES/ovt-Remove-some-dead-code.patch
@ -1,167 +0,0 @@
-From 1b4d9bf7319862558abca4dc842a69a2f91c835e Mon Sep 17 00:00:00 2001
-From: John Wolfe <jwolfe@vmware.com>
-Date: Mon, 8 May 2023 19:04:57 -0700
-Subject: [PATCH] Remove some dead code.
-
-RH-Author: Ani Sinha <None>
-RH-MergeRequest: 21: Remove some dead code.
-RH-Bugzilla: 2217081
-RH-Acked-by: Miroslav Rezanina <mrezanin@redhat.com>
-RH-Acked-by: Vitaly Kuznetsov <vkuznets@redhat.com>
-RH-Commit: [1/1] 8fa7cae2635fe32483bd1400df4014d01088f9d9
-
-Address CVE-2023-20867.
-Remove some authentication types which were deprecated long
-ago and are no longer in use. These are dead code.
-
-Cherry-picked from https://github.com/vmware/open-vm-tools/blob/CVE-2023-20867.patch/2023-20867-Remove-some-dead-code.patch
-
-Signed-off-by: Ani Sinha <anisinha@redhat.com>
---
- open-vm-tools/services/plugins/vix/vixTools.c | 102 ------------------
- 1 file changed, 102 deletions(-)
-
-diff --git a/open-vm-tools/services/plugins/vix/vixTools.c b/open-vm-tools/services/plugins/vix/vixTools.c
-index 34f3125d..0789d6a5 100644
--- a/open-vm-tools/services/plugins/vix/vixTools.c
-+++ b/open-vm-tools/services/plugins/vix/vixTools.c
-@@ -254,8 +254,6 @@ char *gImpersonatedUsername = NULL;
- #define  VIX_TOOLS_CONFIG_API_AUTHENTICATION          "Authentication"
- #define  VIX_TOOLS_CONFIG_AUTHTYPE_AGENTS             "InfrastructureAgents"
- 
-#define VIX_TOOLS_CONFIG_INFRA_AGENT_DISABLED_DEFAULT  TRUE
-
- /*
-  * The switch that controls all APIs
-  */
-@@ -730,9 +728,6 @@ VixError GuestAuthSAMLAuthenticateAndImpersonate(
- 
- void GuestAuthUnimpersonate();
- 
-static Bool VixToolsCheckIfAuthenticationTypeEnabled(GKeyFile *confDictRef,
-                                                     const char *typeName);
-
- #if SUPPORT_VGAUTH
- 
- VGAuthError TheVGAuthContext(VGAuthContext **ctx);
-@@ -7913,29 +7908,6 @@ VixToolsImpersonateUser(VixCommandRequestHeader *requestMsg,   // IN
-                                           userToken);
-       break;
-    }
-   case VIX_USER_CREDENTIAL_ROOT:
-   {
-      if ((requestMsg->requestFlags & VIX_REQUESTMSG_HAS_HASHED_SHARED_SECRET) &&
-          !VixToolsCheckIfAuthenticationTypeEnabled(gConfDictRef,
-                                            VIX_TOOLS_CONFIG_AUTHTYPE_AGENTS)) {
-          /*
-           * Don't accept hashed shared secret if disabled.
-           */
-          g_message("%s: Requested authentication type has been disabled.\n",
-                    __FUNCTION__);
-          err = VIX_E_GUEST_AUTHTYPE_DISABLED;
-          goto done;
-      }
-   }
-   // fall through
-
-   case VIX_USER_CREDENTIAL_CONSOLE_USER:
-      err = VixToolsImpersonateUserImplEx(NULL,
-                                          credentialType,
-                                          NULL,
-                                          loadUserProfile,
-                                          userToken);
-      break;
-    case VIX_USER_CREDENTIAL_NAME_PASSWORD:
-    case VIX_USER_CREDENTIAL_NAME_PASSWORD_OBFUSCATED:
-    case VIX_USER_CREDENTIAL_NAMED_INTERACTIVE_USER:
-@@ -8104,36 +8076,6 @@ VixToolsImpersonateUserImplEx(char const *credentialTypeStr,         // IN
-          }
-       }
- 
-      /*
-       * If the VMX asks to be root, then we allow them.
-       * The VMX will make sure that only it will pass this value in,
-       * and only when the VM and host are configured to allow this.
-       */
-      if ((VIX_USER_CREDENTIAL_ROOT == credentialType)
-            && (thisProcessRunsAsRoot)) {
-         *userToken = PROCESS_CREATOR_USER_TOKEN;
-
-         gImpersonatedUsername = Util_SafeStrdup("_ROOT_");
-         err = VIX_OK;
-         goto quit;
-      }
-
-      /*
-       * If the VMX asks to be root, then we allow them.
-       * The VMX will make sure that only it will pass this value in,
-       * and only when the VM and host are configured to allow this.
-       *
-       * XXX This has been deprecated XXX
-       */
-      if ((VIX_USER_CREDENTIAL_CONSOLE_USER == credentialType)
-            && ((allowConsoleUserOps) || !(thisProcessRunsAsRoot))) {
-         *userToken = PROCESS_CREATOR_USER_TOKEN;
-
-         gImpersonatedUsername = Util_SafeStrdup("_CONSOLE_USER_NAME_");
-         err = VIX_OK;
-         goto quit;
-      }
-
-       /*
-        * If the VMX asks us to run commands in the context of the current
-        * user, make sure that the user who requested the command is the
-@@ -10814,50 +10756,6 @@ VixToolsCheckIfVixCommandEnabled(int opcode,                          // IN
- }
- 
- 
-/*
- *-----------------------------------------------------------------------------
- *
- * VixToolsCheckIfAuthenticationTypeEnabled --
- *
- *    Checks to see if a given authentication type has been
- *    disabled via the tools configuration.
- *
- * Return value:
- *    TRUE if enabled, FALSE otherwise.
- *
- * Side effects:
- *    None
- *
- *-----------------------------------------------------------------------------
- */
-
-static Bool
-VixToolsCheckIfAuthenticationTypeEnabled(GKeyFile *confDictRef,     // IN
-                                         const char *typeName)      // IN
-{
-   char authnDisabledName[64]; // Authentication.<AuthenticationType>.disabled
-   gboolean disabled;
-
-   Str_Snprintf(authnDisabledName, sizeof(authnDisabledName),
-                VIX_TOOLS_CONFIG_API_AUTHENTICATION ".%s.disabled",
-                typeName);
-
-   ASSERT(confDictRef != NULL);
-
-   /*
-    * XXX Skip doing the strcmp() to verify the auth type since we only
-    * have the one typeName (VIX_TOOLS_CONFIG_AUTHTYPE_AGENTS), and default
-    * it to VIX_TOOLS_CONFIG_INFRA_AGENT_DISABLED_DEFAULT.
-    */
-   disabled = VMTools_ConfigGetBoolean(confDictRef,
-                                       VIX_TOOLS_CONFIG_API_GROUPNAME,
-                                       authnDisabledName,
-                                       VIX_TOOLS_CONFIG_INFRA_AGENT_DISABLED_DEFAULT);
-
-   return !disabled;
-}
-
-
- /*
-  *-----------------------------------------------------------------------------
-  *
-- 
-2.39.3
-
--- a/SOURCES/vgauthd.service
+++ b/SOURCES/vgauthd.service
@ -1,6 +1,6 @@
 [Unit]
 Description=VGAuth Service for open-vm-tools
-Documentation=http://github.com/vmware/open-vm-tools
+Documentation=https://github.com/vmware/open-vm-tools
 ConditionVirtualization=vmware
 PartOf=vmtoolsd.service

--- a/SOURCES/vmtoolsd.service
+++ b/SOURCES/vmtoolsd.service
@ -1,13 +1,18 @@
 [Unit]
 Description=Service for virtual machines hosted on VMware
-Documentation=http://github.com/vmware/open-vm-tools
+Documentation=https://github.com/vmware/open-vm-tools
 ConditionVirtualization=vmware
 Requires=vgauthd.service
 After=vgauthd.service
+DefaultDependencies=no
+Before=cloud-init-local.service
+StartLimitIntervalSec=30
+StartLimitBurst=3

 [Service]
 ExecStart=/usr/bin/vmtoolsd
 TimeoutStopSec=5
+Restart=on-failure

 [Install]
 WantedBy=multi-user.target
--- a/SPECS/open-vm-tools.spec
+++ b/SPECS/open-vm-tools.spec
@ -1,5 +1,5 @@
 ################################################################################
-### Copyright 2013-2021 VMware, Inc.  All rights reserved.
+### Copyright 2013-2023 VMware, Inc.  All rights reserved.
 ###
 ### RPM SPEC file for building open-vm-tools packages.
 ###
@ -19,9 +19,9 @@
 ################################################################################

 %global _hardened_build 1
-%global majorversion    12.1
+%global majorversion    12.3
 %global minorversion    5
-%global toolsbuild      20735119
+%global toolsbuild      22544099
 %global toolsversion    %{majorversion}.%{minorversion}
 %global toolsdaemon     vmtoolsd
 %global vgauthdaemon    vgauthd
@ -32,7 +32,7 @@

 Name:             open-vm-tools
 Version:          %{toolsversion}
-Release:          1%{?dist}.1
+Release:          2%{?dist}
 Summary:          Open Virtual Machine Tools for virtual machines hosted on VMware
 License:          GPLv2
 URL:              https://github.com/vmware/%{name}
@ -46,13 +46,12 @@ Source5:          vmtoolsd.pam


 %if 0%{?rhel} >= 7
-ExclusiveArch:    x86_64 aarch64
+ExclusiveArch:    x86_64
 %else
 ExclusiveArch:    %{ix86} x86_64 aarch64
 %endif

-#Patch0: name.patch
-Patch1: ovt-Remove-some-dead-code.patch
+# Patch0: name.patch

 BuildRequires:    autoconf
 BuildRequires:    automake
@ -88,7 +87,7 @@ BuildRequires:    gtk3-devel >= 3.10.0
 BuildRequires:    gtkmm30-devel >= 3.10.0
 BuildRequires:    libtirpc-devel
 BuildRequires:    rpcgen
-BuildRequires:    systemd-rpm-macros
+BuildRequires:    systemd-udev
 %else
 BuildRequires:    gtk2-devel >= 2.4.0
 BuildRequires:    gtkmm24-devel
@ -409,212 +408,196 @@ fi

 %files test
 %{_bindir}/vmware-vgauth-smoketest
+
 %changelog
-* Mon Jun 26 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-1.el9_2.1
- ovt-Remove-some-dead-code.patch [bz#2217081]
- Resolves: bz#2217081
-  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-9.2.0.z])
+* Wed Dec 06 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
+- ovt-Restart-tools-on-failure.patch [RHEL-17683]
+- Resolves: RHEL-17683
+  (Add Restart=on-failure to vmtoolsd.service [rhel-8])

-* Fri Dec 09 2022 Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-1
- Rebase to open-vm-tools 12.1.5 [bz#2150190]
- Resolves: bz#2150190
-  ([ESXi][RHEL9]Open-vm-tools release 12.1.5 has been released - please rebase)
+* Thu Nov 09 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
+- Rebase to 12.3.5 [RHEL-15059]
+- Fix CVE-2023-34058 [RHEL-14649]
+- Fix CVE-2023-34059 [RHEL-14683]
+- Resolves: RHEL-15059
+  ([ESXi][RHEL8]open-vm-tools version 12.3.5 has been released - please rebase)
+- Resolves: RHEL-14649
+  (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-8.10.0])
+- Resolves: RHEL-14683
+  (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-8.10.0])

-* Fri Sep 09 2022 Miroslav Rezanina <mrezanin@redhat.com> - 12.1.0-1
- Rebase to open-mv-tools 12.1.0 [bz#2121203]
- Resolves: bz#2121203
-  ([ESXi][RHEL9]Open-vm-tools release 12.1.0 has been released - please rebase)
+* Wed Sep 27 2023 Jon Maloy <jmaloy@redhat.com> - 12.2.5-4
+- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-7012]
+- Resolves: RHEL-7012
+  ([RHEL8.10][ESXi]Latest version of open-vm-tools breaks VM backups)
+
+* Wed Sep 20 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
+- Rebuild CVE-2023-20900 for 8.10
+- Resolves: RHEL-4584
+  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-8.10.0])
+
+* Tue Jul 11 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
+- Rebase to open-vm-tools 12.2.5 [bz#2214861]
+- Resolves: bz#2214861
+  ([ESXi][RHEL8]open-vm-tools version 12.2.5 has been released - please rebase)
+- Resolves: bz#2216415
+  ([ESXi][RHEL8] URL in service unit files are started from http instead of https)
+
+* Wed Jun 28 2023 Jon Maloy <jmaloy@redhat.com> - 12.2.0-3
+- ovt-Remove-some-dead-code.patch [bz#2215563]
+- Resolves: bz#2215563
+  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-8])
+
+* Wed May 03 2023 Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1
+- Rebase to open-vm-tools 12.2.0 [bz#2177068]
+- Resolves: bz#2177068
+  ([ESXi][RHEL8]open-vm-tools version 12.2.0 has been released - please rebase)
+
+* Fri Dec 09 2022 Miroslav Rezanina <mrezanin@redhat.com> 12.1.5-1
+- Rebase to open-vm-tools 12.1.5 [bz#2150188]
+- Resolves: bz#2150188
+  (ESXi][RHEL8]Open-vm-tools release 12.1.5 has been released - please rebase)
+
+* Tue Sep 13 2022 Miroslav Rezanina <mrezanin@redhat.com> 12.1.0-1
+- Rebase to open-vm-tools 12.1.0
+- Resolves: bz#2121196
+  ([ESXi][RHEL8]Open-vm-tools release 12.1.0 has been released - please rebase)
+
+* Tue Sep 06 2022 Jon Maloy <jmaloy@redhat.com> - 12.0.5-2
+- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119284]
+- Resolves: bz#2119284
+  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-8.7.0])

 * Tue Jun 07 2022 Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-1
- Rebase to open-vm-tools 12.0.5 [bz#2090275]
- Resolves: bz#2090275
-  ([ESXi][RHEL9]Open-vm-tools release 12.0.5 has been released - please rebase)
+- Rebase to open-vm-tools 12.0.5 [bz#2090273]
+- Resolves: bz#2090273
+  ([ESXi][RHEL8]Open-vm-tools release 12.0.5 has been released - please rebase)

 * Thu Apr 28 2022 Miroslav Rezanina <mrezanin@redhat.com> - 12.0.0-1
- Rebase to 12.0.0 [bz#2061193]
- Resolves: bz#2061193
-  ([ESXi][RHEL9]Open-vm-tools release 12.0.0 has been released - please rebase)
+- Rebase to open-vm-tools 12.0.0 [bz#2061189]
+- Resolves: bz#2061189
+  ([ESXi][RHEL8]Open-vm-tools release 12.0.0 has been released - please rebase)

-* Fri Oct 15 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.3.5-1
- Rebase to 11.3.5 [bz#2008243]
- Resolves: bz#2008243
-  ([ESXi][RHEL9]Open-vm-tools release 11.3.5 has been released - please rebase)
+* Mon Oct 18 2021 Miroslav Rezanian <mrezanin@redhat.com> - 11.3.5-1
+- Rebase to open-vm-tools 11.3.5 [bz#2008244]
+- Resolves: bz#2008244
+  ([ESXi][RHEL8]Open-vm-tools release 11.3.5 has been released - please rebase)

-* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 11.3.0-2
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
-  Related: rhbz#1991688
+* Thu Sep 23 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.3.0-1.el8
+- Rebase to open-vm-tools 11.3.0 [bz#1974468]
+- Resolves: bz#1974468
+  ([ESXi][RHEL8]Open-vm-tools release 11.3.0 has been released - please rebase)

-* Wed Jul 21 2021 Miroslav Rezanina <rezanin@redhat.com> - 11.3.0-1
- Rebase to 11.3.0 [bz#1974471]
- Resolves: bz#1974471
-  ([ESXi][RHEL9]Open-vm-tools release 11.3.0 has been released - please update for RHEL 9.0)
+* Thu Apr 29 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-2.el8
+- ovt-Fix-a-memory-leak-reported-by-a-partner-from-their-C.patch [bz#1935807]
+- Resolves: bz#1935807
+  ([ESXi][RHEL-8.5][open-vm-tools] Coverity detected an important defect in open-vm-tools-11.2.5 rebase)

-* Wed Jun 16 2021 Mohan Boddu <mboddu@redhat.com> - 11.2.5-5
- Rebuilt for RHEL 9 BETA for openssl 3.0
-  Related: rhbz#1971065
+* Tue Mar 02 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-1.el8
+- Rebase to 11.2.5 [bz#1916561]
+  ([ESXi][RHEL8.5]Open-vm-tools update release 11.2.5 has been released)

-* Tue May 11 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-4
- ovt-Fix-a-memory-leak-reported-by-a-partner-from-their-C.patch [bz#1954040]
- Resolves: bz#1954040
-  ([ESXi][RHEL9.0][open-vm-tools] Coverity detected an important defect in open-vm-tools-11.2.5 rebase)
+* Tue Dec 01 2020 Miroslav Rezanina <mrezanin@redhat.com> - 11.2.0-2.el8
+- ovt-Fix-memory-leaks.patch [bz#1896804]
+- Resolves: bz#1896804
+  ([ESXi][open-vm-tools] Coverity detected important defects in open-vm-tools-11.2.0 rebase)

-* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 11.2.5-3
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
+* Tue Nov 10 2020 Miroslav Rezanina <mrezanin@redaht.com> - 11.2.0-1.el8
+- Rebase to 11.2.0 [bz#1890831]
+- Resolves: bz#1890831
+  ([ESXi][RHEL8]Rebase open-vm-tools to 11.2.0 for 8.4)

-* Fri Apr 09 2021 Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-2.el9
- ovt-Fixes-necessary-to-build-open-vm-tools-with-newer-gt.patch [bz#1936382]
- ovt-Update-spec-file-for-correct-build.patch [bz#1936382]
- Resolves: bz#1936382
-  ([ESXi][RHEL-9][FTBS] open-vm-tools not working with newer gtk libraries)
+* Wed Sep 30 2020 Miroslav Rezanina <mrezanin@redaht.com> - 11.1.5-1.el8
+- Rebase to 11.1.5 [bz#1870781]
+- Resolves: bz#1870781
+  ([ESXi][RHEL8]Rebase open-vm-tools to 11.1.5 for 8.4)

-* Fri Jan 15 2021 Ravindra Kumar <ravindrakumar@vmware.com> - 11.2.5-1
- Package new upstream version open-vm-tools-11.2.5-17337674.
- libdnet dependency was removed in open-vm-tools 11.0.0. So,
-  removed the stale BuildRequires for libdnet.
+* Thu Jul 02 2020 Miroslav Rezanina <mrezanin@redaht.com> - 11.1.0-2.el8
+- Remove net-tools dependency [bz#1849459]
+- Resolves: bz#1849459
+  ([ESXi][RHEL8]Incorporate SDMP related fixes and removal of net-tools dependency)

-* Thu Jan 14 2021 Richard W.M. Jones <rjones@redhat.com> - 11.2.0-2
- Bump and rebuild against libdnet 1.14 (RHBZ#1915838).
+* Tue May 26 2020 Mirosalv Rezanina <mrezanin@redhat.com> - 11.1.0-1.el8
+- Rebase to 11.1.0 [bz#1806677]
+- Added open-vm-tools-sdmp package [bz#1833157)
+- Resolves: bz#1806677
+  ([ESXi][RHEL8]Rebase open-vm-tools to 11.1.0 for RHEL 8.3)
+- Resolves: bz#1833157
+  ([ESXi][RHEL8]Add new open-vm-tools-sdmp package for RHEL 8.3)

-* Fri Nov 06 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.2.0-1
- Package new upstream version open-vm-tools-11.2.0-16938113.
+* Tue Apr 21 2020 Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-3.el8
+- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1811729]
+- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1811729]
+- ovt-add-appinfo-plugin.patch [bz#1809751]
+- Resolves: bz#1809751
+  ([ESXi][RHEL8.2.1]open-vm-tools add appinfo plugin patch)
+- Resolves: bz#1811729
+  ([ESXi][RHEL8.2.1]open-vm-tools coverity scan issue)

-* Fri Oct 30 2020 Jeff Law <law@redhat.com> - 11.1.5-2
- Fix incorrect volatile exposed by gcc-11
+* Wed Apr 08 2020 Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-1.el8
+- Rebase to 11.0.5 (bz#1798285)
+- Resolves: bz#1798285
+  ([ESXi][RHEL8.2.1]Rebase open-vm-tools to 11.0.5 for 8.2.1)

-* Tue Sep 08 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.1.5-1
- Package new upstream version open-vm-tools-11.1.5-16724464.
- Removed gcc10-warning.patch and sdmp-fixes.patch (no longer needed).
+* Tue Feb 18 2020 Miroslav Rezanina <mrezanin@redhat.com> - 11.0.0-4.el8
+- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1800812]
+- Resolves: bz#1800812
+  ([ESXi][RHEL8]Log spew "[ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name)

-* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 11.1.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
+* Thu Dec 05 2019 Miroslav Rezanina <mrezanin@redhat.com> - 11.0.0-3.el8
+- ovt-Address-Coverity-issues-reported-in-bora-lib-file-fi.patch [bz#1769881]
+- ovt-Fix-a-potential-NULL-pointer-dereference-in-the-vmba.patch [bz#1769881]
+- ovt-Address-two-Coverity-reported-issues-in-hostinfoPosi.patch [bz#1769881]
+- ovt-Fix-a-resource-leak-issue-in-deployPkg.patch [bz#1769881]
+- Resolves: bz#1769881
+  ([ESXi][RHEL8.2]Important issues found by covscan in "open-vm-tools-11.0.0-2.el8" package)

-* Thu Jul 09 2020 Merlin Mathesius <mmathesi@redhat.com> - 11.1.0-3
- Conditional fixes to build for ELN
+* Mon Oct 14 2019 Miroslav Rezanina <mrezanin@redhat.com> - 11.0.0-1.el8
+- Rebase to 11.0.0 [bz#1754658]
+- Resolves: bz#1754658
+  (Rebase open-vm-tools to 11.0 for 8.2.0)
+- Resolves: bz#1760891
+  (Need to backport some severe memory leak fixes from upstream)

-* Sun Jun 21 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.1.0-2
- Added sdmp-fixes.patch from upstream to remove net-tools dependency
-  and couple of important fixes
+* Thu Aug 01 2019 Miroslav Rezanina <mrezanin@redhat.com> - 10.3.10-3.el8
+- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1602648]
+- ovt-Fix-memory-leak-in-GetFormattedCommandLine-function-.patch [bz#1602648]
+- ovt-Fix-a-leak-if-VGAuth-setup-fails.-Coverity-issue.patch [bz#1602648]
+- ovt-Fix-minor-leak-in-FileRotateByRenumber-Coverity-scan.patch [bz#1602648]
+- ovt-Fix-memory-leak-in-SNEBuildHash-function.patch [bz#1602648]
+- ovt-Fix-Coverity-reported-issues-in-i18n.c-code-VMTools-.patch [bz#1602648]
+- ovt-Fix-a-memory-leak-in-the-unicode-library.patch [bz#1602648]
+- ovt-Fix-a-trivial-Coverity-reported-memory-leak-in-vgaut.patch [bz#1602648]
+- ovt-Fixes-for-few-leaks-and-improved-error-handling.patch [bz#1602648]
+- ovt-Fix-Coverity-reported-double-memory-free-errors.patch [bz#1602648]
+- ovt-Fix-a-trivial-Coverity-reported-memory-leak.patch [bz#1602648]
+- ovt-Fix-RH-Covscan-Coverity-reported-memory-leaks-in-too.patch [bz#1602648]
+- ovt-Fix-Using-uninitialized-value-issue-reported-by-Cove.patch [bz#1602648]
+- ovt-copyPasteCompatX11.c-code-generating-unnecessary-Cov.patch [bz#1602648]
+- ovt-Fix-a-Coverity-issue-reported-in-vgauth-serviceImpl-.patch [bz#1602648]
+- ovt-Fix-two-coverity-issues-reported-by-a-customer.patch [bz#1602648]
+- Resolves: bz#1602648
+  ([ESXi][RHEL8]Please review important issues found by covscan in "open-vm-tools-10.2.5-2.el8+7" package)

-* Mon May 25 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.1.0-1
- Package new upstream version open-vm-tools-11.1.0-16036546.
- Added new open-vm-tools-sdmp package.
- Workaround for vm-support script path is no longer needed.
- Added missing dependencies for vm-support script.
- Updated gcc10-warning.patch.
- Removed gcc9-static-inline.patch and diskinfo-log-spew.patch that
-  are no longer needed.
+* Tue Jun 04 2019 Miroslav Rezanina <mrezanin@redhat.com> - 10.3.10-2
+- Rebase to 10.3.10 [bz#1702784]
+- Resolves: bz#1702784
+  (Rebase open-vm-tools to 10.3.10)

-* Sun May 17 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.5-4
- Updated PAM configuration file to follow configured authn scheme.
+* Tue Jan 08 2019 Miroslav Rezanina <mrezanin@redhat.com> - 10.3.0-2.el8
+- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1660713]
+- Resolves: bz#1660713
+  ([ESXi][RHEL8.0]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)

-* Tue Mar 24 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.5-3
- Use /sbin/ldconfig on older than Fedora 28 and RHEL 8 platforms.
+* Tue Oct 16 2018 Miroslav Rezanina <mrezanin@redhat.com> - 10.3.0-1
+- Rebase to 10.3.0 [bz#1626578]
+- Resolves: bz#1626578
+  ([ESXi][RHEL8]Rebase open-vm-tools to 10.3.0)

-* Fri Feb 07 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.5-2
- Added patch diskinfo-log-spew.patch.
-
-* Tue Feb 04 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.5-1
- Package new upstream version open-vm-tools-11.0.5-15389592.
- Removed vix-memleak.patch which is no longer needed.
-
-* Tue Feb 04 2020 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.0-6
- Added gcc10-warning.patch for fixing compilation issues.
-
-* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 11.0.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
-
-* Wed Oct 09 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.0-4
- Fixes for drag-n-drop that needs vmblock-fuse mount.
- Added run-vmblock\x2dfuse.mount service unit for vmblock-fuse mount.
- Added open-vm-tools.conf for loading Fuse.
-
-* Wed Oct 09 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.0-3
- Cleanup GuestProxy certs from /etc/vmware-tools/GuestProxyData if needed.
- Cleanup vmtoolsd-init service symlinks.
-
-* Wed Oct 02 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.0-2
- vmtoolsd-init.service is no longer needed for 11.0.0, removed it.
-
-* Wed Oct 02 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 11.0.0-1
- Package new upstream version open-vm-tools-11.0.0-14549434.
- Added gcc9-static-inline.patch for gcc9 warnings.
- Added vix-memleak.patch for a memory leak.
- Removed gcc9-warnings.patch which is no longer needed.
- Removed vmware-guestproxycerttool as it is no longer available upstream.
-
-* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 10.3.10-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
-
-* Sat Mar 16 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.10-1
- Package new upstream version open-vm-tools-10.3.10-12406962.
- Removed quiescing-combined.patch which is no longer needed.
-
-* Wed Feb 13 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.5-2
- Combine all gcc9 warning patches into one single gcc9-warnings.patch.
-
-* Tue Feb 12 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.5-1
- Package new upstream version open-vm-tools-10.3.5-10430147.
- Removed cloud-init.patch which is no longer needed.
- Removed hgfsPlugin-crash.patch which is no longer needed.
- Removed linuxDeploymentUtils-strncat.patch which is no longer needed.
- Added quiescing-combined.patch for quiesced snapshot fixes.
- Updated hgfsServer-aligned.patch for open-vm-tools-10.3.5.
-
-* Tue Feb 12 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-8
- Updated *-aligned.patch files with more tweaks.
- Filed a regression in readdir operation in dir-aligned.patch.
-
-* Sun Feb 03 2019 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-7
- Added hgfsServer-aligned.patch for "address-of-packed-member" error.
- Added hgfsmounter-aligned.patch for "address-of-packed-member" error.
- Added util-misc-format.patch for "format-overflow" error.
- Added linuxDeploymentUtils-strncat.patch for "stringop-truncation" error.
- Added filesystem-aligned.patch for "address-of-packed-member" error.
- Added file-aligned.patch for "address-of-packed-member" error.
- Added fsutil-aligned.patch for "address-of-packed-member" error.
- Added dir-aligned.patch for "address-of-packed-member" error.
- Added link-aligned.patch for "address-of-packed-member" error.
-
-* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 10.3.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
-
-* Mon Oct 01 2018 Simone Caronni <negativo17@gmail.com> - 10.3.0-5
- Update SPEC file to match packaging guidelines.
- Re-add ldconfig scriptlets. They expand to nothing in Fedora 28+, but they
-  are still required for Fedora 27. These can be removed when Fedora 27 is EOL.
-
-* Fri Aug 10 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-4
- Fixed few bugs related to vmtoolsd-init.service.
-
-* Tue Aug 07 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-3
- Implement the https://pagure.io/packaging-committee/issue/506 guideline.
- Added vmtoolsd-init.service per the guideline.
- Replaced the certificate cleanup with "vmware-guestproxycerttool -e".
-
-* Mon Aug 06 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-2
- Added hgfsPlugin-crash.patch for vmtoolsd crash (RHBZ#1612470).
-
-* Thu Aug 02 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.3.0-1
- Package new upstream version open-vm-tools-10.3.0-8931395.
- Updated cloud-init.patch for 10.3.0.
- Removed use-tirpc.patch which is no longer needed.
-
-* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 10.2.5-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
-
-* Wed Jul 11 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.2.5-6
- Added cloud-init.patch to detect cloud-init correctly.
- Added cleanup for /etc/vmware-tools directory on uninstall.
-
-* Tue Jul 10 2018 Pete Walter <pwalter@fedoraproject.org> - 10.2.5-5
- Rebuild for ICU 62
-
-* Thu Jul 05 2018 Richard W.M. Jones <rjones@redhat.com> - 10.2.5-4
- Remove ldconfig
-  https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/SU3LJVDZ7LUSJGZR5MS72BMRAFP3PQQL/
-
-* Tue May 15 2018 Pete Walter <pwalter@fedoraproject.org> - 10.2.5-3
- Rebuild for ICU 61.1
+* Mon May 14 2018 Miroslav Rezanina <mrezanin@redhat.com> - 10.2.5-2
+- Updated RHEL version
+- Resolves: bz#1527233
+  ([ESXi][RHEL7.5]Rebase open-vm-tools to 10.2.5)

 * Wed May 09 2018 Ravindra Kumar <ravindrakumar@vmware.com> - 10.2.5-2
 - Use tirpc for Fedora 28 onwards.
				`@ -1 +0,0 @@`
				`92cfc4bc23f3f4392a0e925d639aeac37c4aafb5 SOURCES/open-vm-tools-12.1.5-20735119.tar.gz`