News

New ESX 3.0.1 / 3.0.2 / 3.5.0 Patches released

VMware released their latest round of patches for VMware ESX 3.0.1/3.0.2/3.5.0 today and as promised I'm right on top of it this time. All of the patchlist.txt's have been updated for the esx-autopatch.pl utility, you can get your updated copies here.

ESX 3.5.0:
Security Update to VMkernel and Multiple RPMs
Update to VMware ESX Scripts
Update to VMnix.
Security Update to the Service Console for Cyrus SASL
Security Update to the Service Console for unzip
Security Update to the Service Console for Tcl/Tk
Security Update to the Service Console for Kerberos 5
Security Update to cim-smwg
Update to VMware-esx-iscsi
Update to VMware-esx-drivers-net-e1000
Security Update to Fix Local Exploitation of an Untrusted Library Path Vulnerability in vmware-authd

ESX 3.0.2:
Software iSCSI Initiator Does Not Discard Stale Target Bindings
vmkernel LVM driver Might Stop Responding; VMware VIX API Memory Overflow Vulnerabilities; Snapshot Operations Might Fail Under High I/O Stress
Service Console Security Update for the pcre package
Service Console Security Update for the net-snmp package
Service Console Security Update for Kerberos 5
Service Console Security Update for unzip
Fix for bnx2 Driver not Properly Reporting Simulated Hardware Failure
Service Console Security Update for Cyrus SASL
Service Console Security Update for Tcl/Tk
VMware VIX API Memory Overflow Vulnerabilities
VMware VIX API Memory Overflow Vulnerabilities; VMware Tools Local Privilege Escalation on Windows-Based GOS; Unable to Browse NFS or Networking Shares; Pre-Built Modules for VMware Tools
Security Update to Fix Local Exploitation of an Untrusted Library Path Vulnerability in vmware-authd

ESX 3.0.1:
VMware VIX API Memory Overflow Vulnerabilities; VMware Tools Local Privilege Escalation on Windows-based GOS; Unable to Browse NFS or Networking Shares; Pre-Built Modules for VMware Tools
Service Console Security Update for the pcre package
Service Console Security Update for the net-snmp package
Service Console Security Update for Kerberos 5
Service Console Security Update for unzip
Service Console Security Update for Cyrus SASL
Service Console Security Update for Tcl/Tk
VMware VIX API Memory Overflow Vulnerabilities
Security Update to Fix Local Exploitation of an Untrusted Library Path Vulnerability in vmware-authd
Snapshot Operations Might Fail Under High I/O Stress


VMware also released updated patch bundles for ESX 2.5.4/2.5.5

Labels: esx patch 3.0.1 3.0.2 3.5.0 updates esx-autopatch.pl

Posted by Dominic Rivera at Wednesday, June 04, 2008.