ESX Server 3.0.1, Patch ESX-1006359: Security Updates to Web Access Components Tomcat and JRE

Download and verify the patch bundle as follows:

1. Download patch ESX-1006359 from http://www.vmware.com/download/vi/vi3_patches.html.
   
   
2. Log in to the ESX Server service console as root.
   
   
3. Create a local depot directory.
   
   # mkdir -p /var/updates
   
   Note: VMware recommends that you use the updates directory.
   
   
4. Change your working directory to /var/updates.
   
   # cd /var/updates
   
   
5. Download the tar file into the /var/updates directory.
   
   
6. Verify the integrity of the downloaded tar file:
   
   # md5sum ESX-1006359.tgz
   
   The md5 checksum output should match the following: 
   
   2224d6e27b86f3155ce9d5895f1f191a ESX-1006359.tgz
   
   
7. Extract the compressed tar archive:
   
   # tar -xvzf ESX-1006359.tgz
   
   
8. Change to the newly created directory, /var/updates/ESX-1006359:
   
   # cd ESX-1006359  

Installation Instructions

After you download and extract the archive, and if you are in the directory that you previously created, use the following command to install the update:

# esxupdate update

To run esxupdate from a different directory, you must specify the bundle path in the command:

# esxupdate -r file://<directory>/ESX-1006359 update

For example, if the host is called depot:

# esxupdate -r file:///depot/var/updates/ESX-1006359 update

During the update process, logs appear on the terminal. You can specify the verbosity of esxupdate logs by using the -v option as shown, below.

# esxupdate -v 10 file://<directory>/ESX-1006359 update

For more information on how to use esxupdate, see the Patch Management for ESX Server 3 tech note at http://www.vmware.com/pdf/esx3_esxupdate.pdf.