VMware ESX third party updates for Service Console packages glibc, sudo, and openldap

a. Service Console update for glibcThe service console packages glibc, glibc-common, and nscd are each updated to version 2.5-34.4908.vmw. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2010-3847 and CVE-2010-3856 to the issues addressed in this update...

VMSA-2011-0001:VMware ESX third party updates for Service Console packages glibc, sudo, and openldap

VMSA-2011-0001.3 VMware ESX third party updates for Service Console packages glibc, sudo, and openldap VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0001.3 VMware Security Advisory Synopsis: VMware ESX third party updates for Service Console packages glibc, sudo, and...

VMware ESXi 4.1 Update Installer SFCB Authentication Flaw

a. ESXi 4.1 Update Installer SFCB Authentication FlawUnder certain conditions, the ESXi 4.1 installer that upgrades an ESXi 3.5 or ESXi 4.0 host to ESXi 4.1 incorrectly handles the SFCB authentication mode. The result is that SFCB authentication could allow login with any username and password...

VMSA-2010-0020:VMware ESXi 4.1 Update Installer SFCB Authentication Flaw

VMSA-2010-0020.1 VMware ESXi 4.1 Update Installer SFCB Authentication Flaw VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0020.1 VMware Security Advisory Synopsis: VMware ESXi 4.1 Update Installer SFCB Authentication Flaw VMware Security Advisory Issue date: 2010-12-21...

VMware ESX third party updates for Service Console

a. Service Console update for samba The service console package samba is updated to version 3.0.9-1.3E.18. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2010-3069 to this issue. Column 4 of the following table lists the action required to remediate the...

VMSA-2010-0019:VMware ESX third party updates for Service Console

VMSA-2010-0019.3 VMware ESX third party updates for Service Console VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0019.3 VMware Security Advisory Synopsis: VMware ESX third party updates for Service Console VMware Security Advisory Issue date: 2010-12-07 VMware Security...

VMSA-2010-0018:VMware hosted products and ESX patches resolve multiple security issues

VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0018 VMware Security Advisory Synopsis: VMware hosted products and ESX patches resolve multiple security issues VMware Security Advisory...

VMware ESX third party update for Service Console kernel

a. Service Console OS update for COS kernel packagThis patch updates the Service Console kernel to fix a stack pointer underflow issue in the 32-bit compatibility layer. Exploitation of this issue could allow a local user to gain additional privileges. The Common Vulnerabilities and Exposures...

VMSA-2010-0017:VMware ESX third party update for Service Console kernel

VMSA-2010-0017.1 VMware ESX third party update for Service Console kernel VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0017.1 VMware Security Advisory Synopsis: VMware ESX third party update for Service Console kernel VMware Security Advisory Issue date: 2010-11-29...

VMware ESXi and ESX third party updates for Service Console and Likewise components

a. Service Console OS update for COS kernel This patch updates the service console kernel to fix multiple security issues. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2010-0415, CVE-2010-0307, CVE-2010-0291, CVE-2010-0622, CVE-2010-1087, CVE-2010-1437...

VMSA-2010-0015:VMware ESX third party updates for Service Console

VMSA-2010-0015.1 VMware ESX third party updates for Service Console VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0015.1 VMware Security Advisory Synopsis: VMware ESX third party updates for Service Console VMware Security Advisory Issue date: 2010-09-30 VMware Security...

VMSA-2010-0016:VMware ESXi and ESX third party updates for Service Console and Likewise components

VMSA-2010-0016.1 VMware ESXi and ESX third party updates for Service Console and Likewise components VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0016.1 VMware Security Advisory Synopsis: VMware ESXi and ESX third party updates for Service Console and Likewise componen...

VMware ESX third party updates for Service Console

a. Service Console update for NSSdb The service console package NSSdb is updated to version nssdb-2.2-35.4.el55. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2010-0826 to this issue. Column 4 of the following table lists the action required to remediate...

VMware Workstation, Player, and ACE address several security issues.

a. VMware Workstation and Player installer security issueThe Workstation 7.x and Player 3.x installers will load an index.htm file located in the current working directory on which Workstation 7.x or Player 3.x is being installed. This may allow an attacker to display a malicious file if they...

VMSA-2010-0014:VMware Workstation, Player, and ACE address several security issues.

VMSA-2010-0014.1 VMware Workstation, Player, and ACE address several security issues. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0014.1 VMware Security Advisory Synopsis: VMware Workstation, Player, and ACE address several security issues. VMware Security Advisory...

VMware ESX third party updates for Service Console

a. Service Console update for cpioThe service console package cpio is updated to version 2.5-6.RHEL3 for ESX 3.x versions and updated to version 2.6-23.el54.1 for ESX 4.x versions. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2005-4268 and CVE-2010-062...

VMSA-2010-0013:VMware ESX third party updates for Service Console

VMSA-2010-0013.3 VMware ESX third party updates for Service Console VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0013.3 VMware Security Advisory Synopsis: VMware ESX third party updates for Service Console VMware Security Advisory Issue date: 2010-08-31 VMware Security...

VMware vCenter Update Manager fix for Jetty Web server addresses important security vulnerabilities

a. VMware vCenter Update Manager Jetty Web server vulnerabilities VMware vCenter Update Manager is an automated patch management solution for VMware ESX hosts and Microsoft virtual machines. Update Manager embeds the Jetty Web server which is a third party component. The default version of the...

VMSA-2010-0012:VMware vCenter Update Manager fix for Jetty Web server addresses HIGH security vulnerabilities

VMSA-2010-0012.2 VMware vCenter Update Manager fix for Jetty Web server addresses important security vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0012.2 VMware Security Advisory Synopsis: VMware vCenter Update Manager fix for Jetty Web server addresses...

VMSA-2010-0011:VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0.

VMSA-2010-0011 VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0011 VMware Security Advisory Synopsis: VMware Studio 2.1 addresses security vulnerabilities in virtual...

VMSA-2010-0010:ESX 3.5 third party update for Service Console kernel

VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0010 VMware Security Advisory Synopsis: ESX 3.5 third party update for Service Console kernel VMware Security Advisory Issue date: 2010-06-24 VMware Securi...

ESXi utilities and ESX Service Console third party updates

a. Service Console update for COS kernel Updated COS package "kernel" addresses the security issues that are fixed through versions 2.6.18-164.11.1. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2009-2695, CVE-2009-2908, CVE-2009-3228, CVE-2009-3286,...

VMSA-2010-0009:ESXi utilities and ESX Service Console third party updates

VMSA-2010-0009.2 ESXi utilities and ESX Service Console third party updates VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0009.2 VMware Security Advisory Synopsis: ESXi utilities and ESX Service Console third party updates VMware Security Advisory Issue date: 2010-05-27...

VMware View 3.1.3 addresses an important cross-site scripting vulnerability

VMware View 3.1.3 addresses an cross-site scripting vulnerability in VMware View. In order for an attacker to exploit the vulnerability, the attacker would need to lure the user to click on the attacker's URL. VMware would like to thank Alexey Sintsov from Digital Security Research Group DSecRG f...

VMware hosted products, vCenter Server and ESX patches resolve multiple security issues

a. Windows-based VMware Tools Unsafe Library Loading vulnerability A vulnerability in the way VMware libraries are referenced allows for arbitrary code execution in the context of the logged on user. This vulnerability is present only on Windows Guest Operating Systems. In order for an attacker t...

VMSA-2010-0007:VMware hosted products, vCenter Server and ESX patches resolve multiple security issues

VMSA-2010-0007.1 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0007.1 VMware Security Advisory Synopsis: VMware hosted products, vCenter Server and ESX patches resolve multiple...

ESX Service Console updates for samba and acpid

a. Service Console update for samba to 3.0.33-3.15.el54.1This update changes the samba packages to samba-client-3.0.33-3.15.el54.1 and samba-common-3.0.33-3.15.el54.1. These versions include fixes for security issues that were first fixed in samba-client-3.0.33-0.18.el48 and...

VMSA-2010-0006:ESX Service Console updates for samba and acpid

VMSA-2010-0006.1 ESX Service Console updates for samba and acpid VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0006.1 VMware Security Advisory Synopsis: ESX Service Console updates for samba and acpid VMware Security Advisory Issue date: 2010-04-01 VMware Security...

VMSA-2010-0005:VMware products address vulnerabilities in WebAccess

VMSA-2010-0005 VMware products address vulnerabilities in WebAccess VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0005 VMware Security Advisory Synopsis: VMware products address vulnerabilities in WebAccess VMware Security Advisory Issue date: 2010-03-29 VMware Security...

ESX Service Console and vMA third party updates

a. vMA and Service Console update for newt to 0.52.2-12.el54.1 Newt is a programming library for color text mode, widget based user interfaces. Newt can be used to add stacked windows, entry widgets, checkboxes, radio buttons, labels, plain text fields, scrollbars, etc., to text mode user...

ESX Service Console and vMA updates for nss and nspr

a. Update for Service Console packages nss and nspr Service console packages for Network Security Services NSS and NetScape Portable Runtime NSPR are updated to versions nss-3.12.3.99.3-1.2157 and nspr-4.7.6-1.2213 respectively. This patch fixes several security issues in the service console...

VMSA-2010-0004:ESX Service Console and vMA third party updates

VMSA-2010-0004.5 ESX Service Console and vMA third party updates VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0004.5 VMware Security Advisory Synopsis: ESX Service Console and vMA third party updates VMware Security Advisory Issue date: 2010-03-03 VMware Security...

VMSA-2010-0003.1 ESX Service Console update for net-snmp

a. Service Console package net-snmp updatedThis patch updates the service console package for net-snmp, net-snmp-utils, and net-snmp-libs to version net-snmp-5.0.9-2.30E.28. This net-snmp update fixes a divide-by- zero flaw in the snmpd daemon. A remote attacker could issue a specially crafted...

VMSA-2010-0003:VMSA-2010-0003.1 ESX Service Console update for net-snmp

VMSA-2010-0003.1 VMSA-2010-0003.1 ESX Service Console update for net-snmp VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0003.1 VMware Security Advisory Synopsis: VMSA-2010-0003.1 ESX Service Console update for net-snmp VMware Security Advisory Issue date: 2010-02-16...

VMware vCenter update release addresses multiple security issues in Java JRE

a. Java JRE Security Update JRE update to version 1.5.022, which addresses multiple security issues that existed in earlier releases of JRE. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the following names to the security issues fixed in JRE 1.5.018: CVE-2009-1093,...

VMSA-2010-0002:VMware vCenter update release addresses multiple security issues in Java JRE

VMSA-2010-0002.4 VMware vCenter update release addresses multiple security issues in Java JRE VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0002.4 VMware Security Advisory Synopsis: VMware vCenter update release addresses multiple security issues in Java JRE VMware...

VMSA-2010-0001:ESX Service Console and vMA updates for nss and nspr

VMSA-2010-0001.1 ESX Service Console and vMA updates for nss and nspr VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0001.1 VMware Security Advisory Synopsis: ESX Service Console and vMA updates for nss and nspr VMware Security Advisory Issue date: 2010-03-03 VMware...

VMSA-2009-0017:VMware vCenter, ESX patch and vCenter Lab Manager releases address cross-site scripting issues

VMSA-2009-0017 VMware vCenter, ESX patch and vCenter Lab Manager releases address cross-site scripting issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0017 VMware Security Advisory Synopsis: VMware vCenter, ESX patch and vCenter Lab Manager releases address...

VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components

a. JRE Security UpdateJRE update to version 1.5.020, which addresses multiple securityissues that existed in earlier releases of JRE. The Common Vulnerabilities and Exposures project cve.mitre.org hasassigned the following names to the security issues fixed inJRE 1.5.018: CVE-2009-1093,...

VMSA-2009-0016:VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components

VMSA-2009-0016.6 VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0016.6 VMware Security Advisory Synopsis: VMware vCenter and ESX update release and vMA...

VMSA-2009-0015:VMware hosted products and ESX patches resolve two security issues

VMSA-2009-0015 VMware hosted products and ESX patches resolve two security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0015 VMware Security Advisory Synopsis: VMware hosted products and ESX patches resolve two security issues VMware Security Advisory Issue date...

VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues

a. Service Console update for DHCP and third party library update for DHCP client. DHCP is an Internet-standard protocol by which a computer can be connected to a local network, ask to be given configuration information, and receive from a server enough information to configure itself as a member...

VMSA-2009-0014:VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues

VMSA-2009-0014.3 VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0014.3 VMware Security Advisory Synopsis: VMware ESX patches for DHCP, Service Console kernel, and JRE resolve...

VMSA-2009-0013:VMware Fusion resolves two security issues

VMSA-2009-0013 VMware Fusion resolves two security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0013 VMware Security Advisory Synopsis: VMware Fusion resolves two security issues VMware Security Advisory Issue date: 2009-10-01 VMware Security Advisory Updated on...

VMSA-2008-0015:Updated ESXi and ESX 3.5 packages address CRITICAL security issue in openwsman

VMSA-2008-0015 Updated ESXi and ESX 3.5 packages address critical security issue in openwsman VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0015 VMware Security AdvisorySynopsis: Updated ESXi and ESX 3.5 packages address critical security issue in openwsman VMware Securi...

VMSA-2009-0012:VMware Movie Decoder, VMware Workstation, VMware Player, and VMware ACE resolve security issues.

VMSA-2009-0012 VMware Movie Decoder, VMware Workstation, VMware Player, and VMware ACE resolve security issues. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0012 VMware Security Advisory Synopsis: VMware Movie Decoder, VMware Workstation, VMware Player, and VMware ACE...

VMSA-2009-0011:VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0

VMSA-2009-0011 VMware Studio 2.0 addresses a security issue in the public beta version of Studio 2.0 VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0011 VMware Security Advisory Synopsis: VMware Studio 2.0 addresses a security issue in the public beta version of Studio 2...

VMware Hosted products update libpng and Apache HTTP Server

a. Third Party Library libpng Updated to 1.2.35Several flaws were discovered in the way third party library libpnghandled uninitialized pointers. An attacker could create a PNG imagefile in such a way, that when loaded by an application linked tolibpng, it could cause the application to crash or...

VMSA-2009-0010:VMware Hosted products update libpng and Apache HTTP Server

VMSA-2009-0010.1 VMware Hosted products update libpng and Apache HTTP Server VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0010.1 VMware Security Advisory Synopsis: VMware Hosted products update libpng and Apache HTTP Server VMware Security Advisory Issue date: 2009-08-...

VMSA-2009-0009:ESX Service Console updates for udev, sudo, and curl

VMSA-2009-0009 ESX Service Console updates for udev, sudo, and curl VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0009 VMware Security Advisory Synopsis: ESX Service Console updates for udev, sudo, and curl VMware Security Advisory Issue date: 2009-07-10 VMware Security...