VMSA-2009-0009:ESX Service Console updates for udev, sudo, and curl

VMSA-2009-0009 ESX Service Console updates for udev, sudo, and curl VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0009 VMware Security Advisory Synopsis: ESX Service Console updates for udev, sudo, and curl VMware Security Advisory Issue date: 2009-07-10 VMware Security...

ESX Service Console update for krb5

a. Service Console package krb5 updateKerberos is a network authentication protocol. It is designed toprovide strong authentication for client/server applications byusing secret-key cryptography.An input validation flaw in the asn1decodegeneraltime function inMIT Kerberos 5 before 1.6.4 allows...

VMSA-2009-0008:ESX Service Console update for krb5

VMSA-2009-0008.2 ESX Service Console update for krb5 VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0008.2 VMware Security Advisory Synopsis: ESX Service Console update for krb5 VMware Security Advisory Issue date: 2009-06-30 VMware Security Advisory Updated on: 2009-08-...

VMSA-2009-0007:VMware Hosted products and ESX and ESXi patches resolve security issues

VMSA-2009-0007 VMware Hosted products and ESX and ESXi patches resolve security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0007 VMware Security Advisory Synopsis: VMware Hosted products and ESX and ESXi patches resolve security issues VMware Security Advisory...

VMSA-2009-0006:VMware Hosted products and patches for ESX and ESXi resolve a CRITICAL security vulnerability

VMSA-2009-0006 VMware Hosted products and patches for ESX and ESXi resolve a critical security vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0006 VMware Security Advisory Synopsis: VMware Hosted products and patches for ESX and ESXi resolve a critical...

VMSA-2009-0005:VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues

VMSA-2009-0005 VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0005 VMware Security Advisory Synopsis: VMware Hosted products, VI Client and patches for ESX and ESXi resolve...

ESX Service Console updates for openssl, bind, and vim

a. Updated OpenSSL package for the Service Console fixes a security issue. OpenSSL 0.9.7a-33.24 and earlier does not properly check the return value from the EVPVerifyFinal function, which could allow a remote attacker to bypass validation of the certificate chain via a malformed SSL/TLS signatur...

VMSA-2009-0004:ESX Service Console updates for openssl, bind, and vim

VMSA-2009-0004.3 ESX Service Console updates for openssl, bind, and vim VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0004.3 VMware Security Advisory Synopsis: ESX Service Console updates for openssl, bind, and vim VMware Security Advisory Issue date: 2009-03-31 VMware...

VirtualCenter Update 4 and ESX patch update Tomcat to version 5.5.27

a. Update for VirtualCenter and ESX patch update Apache Tomcat version to 5.5.27Update for VirtualCenter and ESX patch update the Tomcat package to version 5.5.27 which addresses multiple security issues that existed in the previous version of Apache Tomcat. The Common Vulnerabilities and Exposur...

VMSA-2009-0002:VirtualCenter Update 4 and ESX patch update Tomcat to version 5.5.27

VMSA-2009-0002.2 VirtualCenter Update 4 and ESX patch update Tomcat to version 5.5.27 VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0002.2 VMware Security Advisory Synopsis: VirtualCenter Update 4 and ESX patch update Tomcat to version 5.5.27 VMware Security Advisory...

VMSA-2009-0003:ESX 2.5.5 patch 12 updates service console packag ed

VMSA-2009-0003 ESX 2.5.5 patch 12 updates service console packag ed VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0003 VMware Security Advisory Synopsis: ESX 2.5.5 patch 12 updates service console packag ed VMware Security Advisory Issue date: 2009-01-26 VMware Security...

ESX patches address an issue loading corrupt virtual disks and update Service Console packages

a. Loading a corrupt delta disk may cause ESX to crashIf the VMDK delta disk of a snapshot is corrupt, an ESX host might crash when the corrupted disk is loaded. VMDK delta files exist for virtual machines with one or more snapshots. This change ensures that a corrupt VMDK delta file cannot be us...

VMSA-2009-0001:ESX patches address an issue loading corrupt virtual disks and update Service Console packages

VMSA-2009-0001.1 ESX patches address an issue loading corrupt virtual disks and update Service Console packages VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0001.1 VMware Security Advisory Synopsis: ESX patches address an issue loading corrupt virtual disks and update...

VMSA-2008-0012:Updated VirtualCenter addresses User Account Disclosure Vulnerability

VMSA-2008-0012 Updated VirtualCenter addresses User Account Disclosure Vulnerability VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0012 VMware Security AdvisorySynopsis: Updated VirtualCenter addresses User Account Disclosure Vulnerability VMware Security AdvisoryIssue...

VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2

a. Critical Memory corruption vulnerabilityA memory corruption condition may occur in the virtual machinehardware. A malicious request sent from the guest operatingsystem to the virtual hardware may cause the virtual hardware towrite to uncontrolled physical memory.VMware would like to thank Andr...

VMSA-2008-0019:VMware Hosted products and patches for ESX and ESXi resolve a CRITICAL security issue and update bzip2

VMSA-2008-0019.1 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2 VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2008-0019.1 VMware Security Advisory Synopsis: VMware Hosted products and patches for ESX and ESXi resolve a...

VMSA-2008-0018:VMware Hosted products and patches for ESX and ESXi resolve two security issues

VMSA-2008-0018 VMware Hosted products and patches for ESX and ESXi resolve two security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2008-0018 VMware Security Advisory Synopsis: VMware Hosted products and patches for ESX and ESXi resolve two security issues VMware...

Updated ESX packages for libxml2, ucd-snmp, libtiff

a. Updated ESX Service Console package libxml2A denial of service flaw was found in the way libxml2 processescertain content. If an application that is linked againstlibxml2 processes malformed XML content, the XML content mightcause the application to stop responding.The Common Vulnerabilities a...

VMSA-2008-0017:Updated ESX packages for libxml2, ucd-snmp, libtiff

VMSA-2008-0017.2 Updated ESX packages for libxml2, ucd-snmp, libtiff VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2008-0017.2 VMware Security Advisory Synopsis: Updated ESX packages for libxml2, ucd-snmp, libtiff VMware Security Advisory Issue date: 2008-10-31 VMware Securi...

VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues

a. Privilege escalation on 64-bit guest operating systemsVMware products emulate hardware functions, like CPU, Memory, and IO.A flaw in VMware's CPU hardware emulation could allow the virtual CPU to jump to an incorrect memory address. Exploitation of this issue on the guest operating system does...

VMSA-2008-0016:VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues

VMSA-2008-0016.3 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0016.3 VMware Security AdvisorySynopsis: VMware Hosted products, VirtualCenter Update 3 and patches...

Updated ESXi and ESX 3.5 packages address critical security issue in openwsman

a. Updated Openwsman Openwsman is a system management platform that implements the Web Services Management protocol WS-Management. It is installed and running by default. It is used in the VMware Management Service Console and in ESXi. The openwsman 2.0.0 management service on ESX 3.5 and ESXi 3....

Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX, VMware VCB address information disclosure, privilege escalation and other security issues.

I Security Issuesa. Setting ActiveX killbitStarting from this release, VMware has set the killbit on itsActiveX controls. Setting the killbit ensures that ActiveXcontrols cannot run in Internet Explorer IE, and avoidsMicrosoft KB article 240797 and the related references on thistopic.Security...

VMSA-2008-0014:Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX, VMware VCB address information disclosure, privilege escalation and other security issues.

VMSA-2008-0014.3 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX, VMware VCB address information disclosure, privilege escalation and other security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0014.3 VMware Security...

Updated ESX packages for OpenSSL, net-snmp, perl

I Security Issuesa. OpenSSL Binaries UpdatedThis fix updates the third party OpenSSL library.The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2007-3108 and CVE-2007-5135 to the issues addressed by this update...

VMSA-2008-0013:Updated ESX packages for OpenSSL, net-snmp, perl

VMSA-2008-0013.4 Updated ESX packages for OpenSSL, net-snmp, perl VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0013.4 VMware Security AdvisorySynopsis: Updated ESX packages for OpenSSL, net-snmp, perl VMware Security AdvisoryIssue date: 2008-08-12 VMware Security...

Updated ESX service console packages for Samba and vmnix

I Service Console rpm updates a. Security Update to Service Console Kernel This fix upgrades service console kernel version to 2.4.21-57.EL. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2007-5001, CVE-2007-6151, CVE-2007-6206, CVE-2008-0007,...

VMSA-2008-0011:Updated ESX service console packages for Samba and vmnix

VMSA-2008-0011.3 Updated ESX service console packages for Samba and vmnix VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0011.3 VMware Security AdvisorySynopsis: Updated ESX service console packages for Samba and vmnix VMware Security AdvisoryIssue date: 2008-07-28 VMware...

Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter

ESX patches and updates for VirtualCenter fix the followingapplication vulnerabilities...

VMSA-2008-0010:Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter

VMSA-2008-0010.3 Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0010.3 VMware Security AdvisorySynopsis: Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter VMware Security...

Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues

a. VMware Tools Local Privilege Escalation on Windows-based guest OS The VMware Tools Package provides support required for shared folders HGFS and other features. An input validation error is present in the Windows-based VMware HGFS.sys driver. Exploitation of this flaw might result in arbitrary...

VMSA-2008-0009:Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve CRITICAL security issues

VMSA-2008-0009.2 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0009.2 VMware Security AdvisorySynopsis: Update...

VMSA-2008-0008:Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion resolve CRITICAL security issues

VMSA-2008-0008 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion resolve critical security issues VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0008 VMware Security AdvisorySynopsis: Updates to VMware Workstation, VMware Player, VMware ACE, VMware...

Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus

a. Updated pcre Service Console package addresses several security issuesThe pcre package contains the Perl-Compatible Regular Expression library. pcre is used by various Service Console utilities. Several security issues were discovered in the way PCRE handles regular expressions. If an...

VMSA-2008-0007:MEDIUM Updated Service Console packages pcre, net-snmp, and OpenPegasus

VMSA-2008-0007.2 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0007.2 VMware Security AdvisorySynopsis: Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus VMware Security...

Updated libxml2 service console package

Updated libxml2 package to address a denial of service flaw. Thanks to the Google security team for identifying and reporting this issue. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2007-6284 to this issue...

VMSA-2008-0006:Updated libxml2 service console package

VMSA-2008-0006.1 Updated libxml2 service console package VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0006.1 VMware Security AdvisorySynopsis: Updated libxml2 service console package VMware Security AdvisoryIssue date: 2008-03-28 VMware Security AdvisoryUpdated on:...

Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line

a. Host to guest shared folder HGFS traversal vulnerabilityOn Windows hosts, if you have configured a VMware host to guest shared folder HGFS, it is possible for a program running in the guest to gain access to the host's file system and create or modify executable files in sensitive locations...

VMSA-2008-0005:Several CRITICAL security vulnerabilities have been addressed in the newest releases of VMware's hosted product line

VMSA-2008-0005.1 Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0005.1 VMware Security AdvisorySynopsis: Several critical security vulnerabilities have bee...

Updated e2fsprogs service console package

Updated e2fsprogs package address multiple integer overflow flaws Thanks to Rafal Wojtczuk of McAfee Avert Research for identifying and reporting this issue. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2007-5497 to this issue...

VMSA-2008-0004:Updated e2fsprogs service console package

VMSA-2008-0004.1 Updated e2fsprogs service console package VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0004.1 VMware Security AdvisorySynopsis: Updated e2fsprogs service console package VMware Security AdvisoryIssue date: 2008-03-03 VMware Security AdvisoryUpdated on:...

Updated aacraid driver and Samba and Python service console updates

I Updated ESX driver...

VMSA-2008-0003:Updated aacraid driver and Samba and Python service console updates

VMSA-2008-0003.1 Updated aacraid driver and Samba and Python service console updates VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0003.1 VMware Security AdvisorySynopsis: Updated aacraid driver and Samba and Python service console updates VMware Security AdvisoryIssue...

Updated Tomcat and Java JRE packages for VirtualCenter 2.5, VirtualCenter 2.0.2, ESX 3.5, ESX 3.0.2, and ESX 3.0.1.

Updated ESX and VirtualCenter fixes the following application vulnerabilities...

Updated service console patches.

I Service Console package security updates...

VMSA-2008-0001:Updated service console patches.

VMSA-2008-0001.1 Updated service console patches. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2008-0001.1 VMware Security Advisory Synopsis: Updated service console patches. VMware Security Advisory Issue date: 2008-01-07 VMware Security Advisory Updated on: 2008-01-22...

VMSA-2008-0002:Updated Tomcat and Java JRE packages for VirtualCenter 2.5, VirtualCenter 2.0.2, ESX 3.5, ESX 3.0.2, and ESX 3.0.1.

VMSA-2008-0002.1 Updated Tomcat and Java JRE packages for VirtualCenter 2.5, VirtualCenter 2.0.2, ESX 3.5, ESX 3.0.2, and ESX 3.0.1. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0002.1 VMware Security AdvisorySynopsis: Updated Tomcat and Java JRE packages for...

VMSA-2007-0006:Updated versions of all supported hosted products and all ESX 2x products and patches for ESX 30x address CRITICAL security updates. Service Console security updates for samba, bind, krb5, vixie-cron, shadow-utils, openldap, pam, gcc, and gdb packages.

VMSA-2007-0006 Updated versions of all supported hosted products and all ESX 2x products and patches for ESX 30x address critical security updates. Service Console security updates for samba, bind, krb5, vixie-cron, shadow-utils, openldap, pam, gcc, and gdb packages. VMware Security Advisory VMwa...

VMSA-2007-0005:Updated Service Console packages (XFree86, UP and SMP kernels, Kerberos libraries) resolve security issues.

VMSA-2007-0005 Updated Service Console packages XFree86, UP and SMP kernels, Kerberos libraries resolve security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2007-0005 VMware Security AdvisorySynopsis: Updated Service Console packages XFree86, UP and SMP kernels,...