VMware
 

Knowledge Base

Search the Knowledge Base:

Products:
Search In:
 

VMware ESX 3.5, Patch ESX350-200811401-SG: Updates VMkernel, hostd, and Other RPMs

Details

Release Date: 12-02-2008

Download Size:
235MB
Download Filename:
ESX350-200811401-SG.zip
md5sum:
988042ce20ce2381216fbe1862c3e66d


Product Versions ESX 3.5
Patch Classification Security
Supersedes ESX350-200712409-BG
ESX350-200712410-BG
ESX350-200802401-BG
ESX350-200802411-BG
ESX350-200802412-BG
ESX350-200803202-UG
ESX350-200804401-BG
ESX350-200804402-BG
ESX350-200804403-BG
ESX350-200805501-BG
ESX350-200806401-BG
ESX350-200806405-BG
ESX350-200806812-BG
ESX350-200809404-SG
Requires ESX350-200810201-UG
ESX350-200811402-SG
Virtual Machine Migration or Shutdown Required Yes
Host Reboot Required Yes
PRs Fixed 251059 321268 278362 303735 253322 301178 314474 317430 123731 277663 301909 268663 292684 195743 319676 325088 313125 277645 318715 56457 331074 332000 257330 275700
Affected Hardware
  • EMC CLARiiON CX-series storage arrays
  • Environments with Solaris10 guests that have ZFS filesystems on the raw LUNs, which have GUID partition tables
Affected Software N/A
RPMs Included VMware-esx-apps
VMware-esx-tools
VMware-esx-vmkctl
VMware-esx-vmkernel
VMware-esx-vmx
VMware-hostd-esx
Related CVE numbers CVE-2008-4917

Solution

Summaries and Symptoms

This patch fixes the following issues:

  • A memory corruption condition may occur in the virtual machine hardware. A malicious request sent from the guest operating system to the virtual hardware may cause the virtual hardware to write to uncontrolled physical memory.

    The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2008-4917 to this issue.

  • VMotion might trigger VMware Tools to automatically upgrade. This issue occurs on virtual machines that have the setting for Check and upgrade Tools before each power-on enabled, and the affected virtual machines are moved, using VMotion, to a host with a newer version of VMware-esx-tools.

    Symptoms seen without this patch:
    • Virtual machines unexpectedly restart during a VMotion migration.
    • The guest operating systems might stall (reported on forums).

    Important: After patching the ESX host, you must upgrade VMware Tools in the affected guests that reside on the host; otherwise, the issue will persist.

  • Swapping active and standby NICs results in a loss of connectivity to the virtual machine. This issue is seen on systems with ESX350-200805501-BG applied.


  • A race issue caused an ASSERT_BUG to unnecessarily run and caused the ESX host to crash. This change removes the invalid ASSERT_BUG.

    Symptoms seen without this patch: The ESX host crashes with an ASSERT message that includes fs3DiskLock.c:1423.

    Example: ASSERT /build/mts/release/bora-77234/bora/modules/vmkernel/vmfs3/fs3DiskLock.c:1423 bugNr=147983

  • A virtual machine can become registered on multiple hosts due to a .vmdk file locking issue. This issue occurs when network errors cause HA to power on the same virtual machine on multiple hosts, and when SAN errors cause the host on which the virtual machine was originally running to lose its heartbeat. The original virtual machine becomes unresponsive.

    With this patch, the VI Client displays a dialog box warning you that a .vmdk lock is lost. The virtual machine is powered off after you click OK.

  • This change fixes confusing VMkernel log messages in cases where one of the storage processors (SP) of an EMC CLARiiON CX storage array is hung. The messages now correctly identify which SP is hung.

    Example of confusing message:

    vmkernel: 1:23:09:57.886 cpu3:1056)WARNING: SCSI: 2667: CX SP B is hung.
    vmkernel: 1:23:09:57.886 cpu3:1056)SCSI: 2715: CX SP A for path vmhba1:2:2 is hung.

    vmkernel: 1:23:09:57.886 cpu3:1056)WARNING: SCSI: 4282: SP of path vmhba1:2:2 is
    hung. Mark all paths using this SP as dead. Causing full path failover.

    In this case, research revealed that SP A was hung, but SP B was not.

  • This patch allows VMkernel to successfully boot on unbalanced NUMA configurations—that is, those with some nodes having no CPU or memory. When such unbalanced configuration is detected, VMkernel shows an alert and continues booting. Previously, VMkernel failed to load on such NUMA configurations.

    Sample alert message when memory is missing from one of the nodes (here, node 2):

    No memory detected in SRAT node 2. This can cause very bad performance.

  • When the zpool create command from a Solaris 10 virtual machine is run on a LUN that is exported as a raw device mapping (RDM) to that virtual machine, the command creates a partition table of type GPT (GUID partition table) on that LUN as part of creating the ZFS filesystem. Later when a LUN rescan is run on the ESX server through VirtualCenter or through the command line, the rescan takes a significantly long amount of time to complete because the VMkernel fails to read the GUID partition table. This patch fixes this problem.

    Symptoms seen without this patch: Rescanning HBAs takes a long time and an error message similar to the following is logged in /var/log/vmkernel:

    Oct 31 18:10:38 vmkernel: 0:00:45:17.728 cpu0:8293)WARNING: SCSI: 255: status Timeout for vml.02006500006006016033d119005c8ef7b7f6a0dd11524149442030. residual R 800, CR 80, ER 3

  • A race in LVM resignaturing code can cause volumes to disappear on a host when a snapshot is presented to multiple ESX hosts, such as in SRM environments.

    Symptoms: After rescanning, VMFS volumes are not visible.

  • This change resolves a rare VMotion instability.

    Symptoms: During a VMotion migration, certain 32-bit applications running in 64-bit guests might crash due to access violations.

  • Solaris 10 Update 4, 64-bit graphical installation fails with the default virtual machine RAM size of 512MB.

  • DRS development and performance improvement. This change prevents unexpected migration behavior.

  • In a DRS cluster environment, the hostd service reaches a hard limit for memory usage, which causes hostd to restart itself.

    Symptoms: The hostd service restarts and temporarily disconnects from VirtualCenter. The ESX host stops responding before hostd reconnects.

  • Fixes for supporting Site Recovery Manager (upcoming December 2008 release) on ESX 3.5 Update 2 and Update 3.

Deployment Considerations

If you are remediating your ESX system using Update Manager 1.0 Update 1 or earlier, see http://kb.vmware.com/kb/1007923.
 
Known issue after installing this patch: All iSCSI LUNs become unavailable with software iSCSI. This issue is known to affect ESX systems with Adaptec Snapserver series and Dell NX series of NAS applicances. The problem is due to the way the software iSCSI driver propagates an overflow condition reported by the target. The workaround is to resinstall ESX. ESX 3.5 Update 4 patch bundle ESX350-200903201-UG (KB 1007971) fixes this issue.

Patch Download and Installation

See the VMware Update Manager Administration Guide for instructions on using Update Manager to download and install patches to automatically update ESX Server 3.5 hosts.

To update ESX Server 3.5 hosts when not using Update Manager, download the most recent patch bundle from http://support.vmware.com/selfsupport/download/ and install the bundle using esxupdate from the command line of the host. For more information, see the ESX Server 3 Patch Management Guide.

 

Feedback

Rating: 1 - Lowest 2 3 4 5 - Highest (1 Ratings)   

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.
What can we do to improve this information? (2000 or fewer characters)
Submit
Rating: 1 - Lowest 2 3 4 5 - Highest (1 Ratings)   
Actions