ESX Server 3.5, Patch ESX350-200808201-UG: Security and Other Updates to VMkernel, Service Console, and hostd (1005894)
Document Last Updated:
27-Aug-2008 - corrected kernel number for service console
25-Sep-2008 - added entry for VMkernel ACPI PCI fixed issue
Summaries and Symptoms
Issues fixed in this patch (and their relevant symptoms, if applicable) include:
The .config file is missing in the ESX Server service console.
Previously, the ESX Server service console kernel-source package omitted the .config file that directs which Linux kernel options are to be enabled. The kernel-source package now provides a .config file, which enables OEM Management Agent packages like Dell OpenManage, HP Insight Manager, and IBM Director to build their kernel modules.
Update the service console kernel version to kernel-2.4.21-57.EL (RHEL3U9).
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2007-5001, CVE-2007-6151, CVE-2007-6206, CVE-2008-0007, CVE-2008-1367, CVE-2008-1375, CVE-2006-4814, and CVE-2008-1669 to the security issues fixed in kernel-2.4.21-57.EL.
Virtual disk size can be changed while the virtual machine is powered on.
On powered-on virtual machines that are running on ESX Server 3.5 Update 2, the size of the virtual disks can be changed by using the Provision Size control that is available when editing the virtual disk settings of virtual machines.
Concurrent VMFS volume rescans impact I/O performance.
This patch includes a dependency for ESX350-200806203-UG, which adds support for VSS quiescing. For the related patch, see KB 1005896.
This patch includes a dependency for ESX350-200806207-UG, for the issue: Ramchecker service fails to start. For the related patch, see KB 1005900.
Add support for Windows Server 2008 as a guest operating system.
VMware Consolidated Backup fails to back up the virtual disks of virtual machines that do not run Windows or Linux operating systems.
Error messages similar to the following might display:
[2008-02-06 12:28:07.234 'vcbMounter' 3076457280 error] Error: Other error encountered: Snapshot creation failed: Custom pre-freeze script failed.
[2008-02-06 12:28:07.234 'vcbMounter' 3076457280 error] An error occurred, cleaning up...
[2008-02-06 12:28:07.356 'SOAP' 3076457280 trivia] Sending soap request to
- Web Services Description Language (WSDL) and API reference documentation incorrectly specify properties of type MethodFault.
Fixed an issue where the web services description language (WSDL) and API reference documentation refers to the type of certain properties as MethodFault, instead of LocalizedMethodFault. As a result, WSDL-based clients are unable to de-serialize responses from the server that contain properties of type MethodFault. The fix updates the WSDL and API reference documentation for faults to specify LocalizedMethodFault rather than MethodFault.
Add a lock mode (-l) to esxtop to help optimize CPU utilization.
In a large ESX Server deployment that includes many LUNs, esxtop usesa lot of CPU while accessing storage statistics.
To alleviate this problem, you can use the -l option with esxtop to enable lock mode. This option locks the entities (worlds, virtual CPUs, LUNs, NICs, and so on) for which statistics are displayed. Any new entities created during the esxtop session will not have statitistics displayed.
Batch mode (-b) also implies lock mode.
Broadcast and multicast packets become duplicated in a virtual machine configuration where two NICs are teamed, promiscuous mode is enabled, and load balancing is set to use the source port ID.
Note: After setting the vSwitch to Promiscous mode to Accept, you must change the setting for /proc/vmware/config/net/AllowPromiscFilters to 1 by entering the command:
echo 1 >> /proc/vmware/config/Net/AllowPromiscFilters
Double-check the setting is enabled. Enter the commmand:
The output returned should look like this:
AllowPromiscFilters (Block duplicate multicast/broadcast packet in a teamed environment when the virtual switch is set to Promiscuous mode.) [0-1: default = 0]: 1
Important: Do not open any /proc files using an editor. Always use the echo command to change /proc settings.
ESX Server host crashes when unloading Bnx2x driver.
This patch fixes an issue where the ESX Server host crashes when unloading the Bnx2x driver. An error message similar to the following might be displayed:
VMware ESX Server [host name]
Exception type 14 in world 1027:idle3 @ 0xa575d7
This patch provides a dependency for ESX350-200806212-UG, which upgrades the megaraid_sas driver from 3.0.9 to 3.0.19 to support the following controllers: LSI MegaRAID SAS 1078and LSI MegaRAID SAS 1064. For the related patch, see KB 1005905.
This patch includes a dependency for ESX350-200806211-UG, which updates the tg3 driver from 3.43b to 3.81c to take advantage of numerous upstream fixes in the drivers. For the related patch, see KB 1005904.
Changed the VMkernel ACPI component's PCI configuration space access to allow affected systems (currently, BX630 blade servers and RX300 S3 rack servers) to successfully boot ESX 3.5. Affected systems also displayed hardware configuration issues, which resulted in various devices not working. Also see http://kb.vmware.com/kb/1005480.
None beyond the required patch bundles and reboot information listed in the table, above.
Patch Download and Installation
See the VMware Update Manager Administration Guide for instructions on using Update Manager to download and install patches to automatically update ESX Server 3.5 hosts.
To update ESX Server 3.5 hosts when not using Update Manager, download the most recent patch bundle from http://www.vmware.com/download/vi/vi3_patches_35.html and install the bundle using esxupdate from the command line of the host. For more information, see the ESX Server 3 Patch Management Guide.